1

Is there a way I can prevent all the domain users from installing games on their machines. They are not admins so I am unsure why they are still able to download free games from the internet. I removed the pre installed games already, but they continue to this.

12 Spice ups
2

content filtering may be your best bet. Prevent them from getting to the game sites at all.
Also they could be from the MS store, that is another challenge to deal with

If something only adds itself to the User Context you don’t need admin rights to install it.

12 Spice ups
3

I’ll second @molan’s advice on the content filter. I use Meraki and have games blocked by content filter.

8 Spice ups
4

Could even be from external storage if you’re not blocking that as well.

And now I’ll have a bit of a rant:

My opinion of this has always been that this is an HR problem, not an IT problem. If people are caught playing games, their manager, policy, and HR need to be the deciding factors on punishment for that. If someone brought in a board game and was playing that instead of working, would IT be involved? No.

In my opinion, IT should only be blocking games if they’re already blocking executables for malware prevention. This is quite a large effort for very minimal benefit.

12 Spice ups
5

PREACH!!

13 Spice ups
6

If your company does not use a proxy or filtering server AND the user has access to Microsoft store, they do NOT need admin rights to install many games.

However, as it was already mentioned, this is a HR issue. A technical fix can be put in, but if they’re playing games, they’re not working, so need a stern chat with HR.

9 Spice ups
7

There’s also an argument to be made about allowing them, albeit with a written policy around personal time and work time while on the clock. Everyone needs a mental break now and then and games provide that. Our receptionist does digital jigsaw puzzles in her down time between taking calls and her other minimal responsibilities.

As long as the games don’t affect the user’s productivity, I think there can be a place for them, but I also agree that it’s not an IT problem unless we’re asked to put something in place to block them from coming in or getting on user systems by HR or their manager.

10 Spice ups
8

For me, blocking games was minimal effort. The Meraki content filter had an option for “games” in the content categories, so I selected it. I had no one in mind that I was targeting, just figured that there was no need for gaming at work.

However, I found that this did affect one of the users, who was taking phone calls. Between calls, she was bored and games helped pass the time. I discussed this with the manager, who was also one of the owners of the company at the time. (Small business.) His take on it was that if there was nothing for her to do, then sure, playing games would help her pass the time. However, he was also interested in seeing if there was something more productive for her to do to pass the time instead. That was handled outside of IT. (I don’t beleive we had an official “HR” department back then.)

8 Spice ups
9

Agreed! If they’re on break and not bothering anyone (loud volume, for example) nor breaking security rules (like installing pirated software or something) then what’s the problem? If, however, there’s a strict policy and the user’s violating it, as said before that’s ALWAYS a manager/HR conversation.

6 Spice ups
10

previous job, we had a small off network hub that 4-5 of us would over lunch connect to that, boot up unreal tournament, play for about 45 minutes while we ate lunch. We were admins, laptops were not on the domain, so we got away with a lot there…

6 Spice ups
11

Thanks for your replies. 1) we do not have an HR dept. 2) I am the IT department 3) Nobody here needs to be getting paid to play games, they all have work to do, so as much as you may feel this is harsh, its not. This isn’t McDonalds, its an engineering firm. People getting paid those salaries should be working when they are here. 4) our firewall has content filtering, but no setting for games. 5) We can’t block USB drives as they use them often for legit reasons, and many of them come from the MS store as well.

So there is no way to block a user from installing an app that they only need user rights for. Got it. Didn’t think so. Luckily there is only 2 people here doing this, so its not horrible. Thanks

7 Spice ups
12

To block games from the MS store, you need to set your update policy to disallow downloads from the store. You’d need to then block all USB media that you don’t pre-approve of first, so they can still have work-authorized external drives, then use GPO to set software/application control policies and tighten UAC compliance…this, of course, only works if local users are NOT admins.

If it’s such a small company, you should have direct access to the owner(s). What’s their take on games?

8 Spice ups
13

Because its also an old company, they like to think that everyone is working all day, and not lying on their timesheets, which we use excel for LOL. I will try what you suggested. Thanks

7 Spice ups
14

You’re welcome and good luck!

6 Spice ups
15
  1. Ensure Users are not admin
  2. Block appdata installs (but that may block like Chrome installations)
  3. Block access to certain games
  4. Block MS Store
5 Spice ups
16

Years ago, at a smaller company, we used to have LAN parties on Friday nights from 5-6PM. Couldn’t do that now.

5 Spice ups
17

I have found that HR departments love to offload their problems to the IT department whenever they can.

5 Spice ups
18

another option is to get into their drive using the admin share, delete game saves, change executable, change folder name. Might just give up.

6 Spice ups
19

If you read above you’d see that we don’t have an HR Dept.

4 Spice ups
20

HR department or not its not your purpose to decide if they can play games or not. There must be some kind of management structure that can make a decision on this, otherwise you’re being a bit of a clean shirt as no mention of security or workplace policies regarding this just your personal opinion.

5 Spice ups