Preventing end users from installing updates

[frizzlefry85]

I noticed that my end users are able to install new versions of apps and updates. How can I prevent them from installing new versions of apps without Admin privileges?

Thanks!

[Bani Verma]

Moving to Deployment for Creative Cloud for Team, Enterprise, & CS​

[Francouz · Accepted solution]

Hi,

There is two way to solve your problem.

1- In the package preference you have a check box to hide the app pannel from the end user. This will solve the problem.

2- Set up an AUSST update server and link your package to it. That way you have a total control over update as the adobe client will go find the update on your server instead of adobe server.

Hope this is clear to understand

[DeToekomst]

Opening up the discussion again...
We're using CC with several usergroups which makes the use of AUSST a bit of a hassle.
However, all our users are all of a sudden able to install apps and updates, a thing that didn't work in the past.

How can we prevent endusers or non-admin users from installing apps and updates from CC and why is our security suddenly bypassed by Adobe software???

Very interested in an answer on this!

Grtz, Pascal

[Francouz]

hi,

this is weird, maybe you have a problem with your GPO ? Did you deploy the package with the admin privilege option check?

One easy thing you can do is to deploy silently a script that will hide the app panel from your user. This way they cannot install or update any app as they will not see the app pannel in the creative cloud desktop app.

This XML file should be in C:\Program Files (x86)\Common Files\Adobe\OOBE\Configs

[frizzlefry85]

Would you recommend building an AUSST server with IIS or Apache? All of my Adobe machines are MAC. Thanks again for your help, building the package with Creative Cloud Packager and unchecking "Show Applications &Updates via the Apps Panel" and "Elevated Privileges" prevents the end user from installing updated versions.

[Francouz]

glad it helps.

For the AUSST any server will do the trick i beleive. We are on a windows environment so we are using windows server