Elevate a Group to allow Microsoft OneDrive to be uninstalled

Scenario

You are an IT Administrator

You are creating an Application Control configuration

You have created a Corporate\ITSupport-Level 1 group

You want to elevate the Corporate\ITSupport-Level 1 group to allow them to uninstall Microsoft OneDrive

Process

  1. In the Corporate\ITSupport-Level1 group rule, select the User Privileges node.
  2. Select the System Controls tab.

  3. In the work area, right-click and select Uninstall Control Item.

    The Add Uninstall Control Item dialog displays.

  4. In the Application field, click the ellipsis to open the Browse Installed Applications dialog, and select Microsoft Onedrive.

    Alternatively, enter the name of the application in the field provided. Wildcards can be used if required. For example, to specify Microsoft OneDrive you might input *onedrive.

    For further information on wildcards, see Wildcards and Regular Expressions.

    If the application to uninstall is located on another endpoint, click the Connect button and enter the endpoint name and your credentials. Select the required application from the list. To select more than one application, hold down the Ctrl button on your keyboard and select the required applications.

    If you are connected remotely to another endpoint, click the My Computer button to view the list of installed applications on your local machine.

  5. Click Add.

    The Application, Publisher and Version details are automatically populated in the Add Uninstall Control Item dialog.

    To apply the control item to all versions of Microsoft OneDrive, replace the version number with a *.

  6. Click Add.

  7. In the Components tab, click the drop-down list in the Policy column and select Builtin Elevate.

    By selecting the BuiltIn Elevate option, you are granting the component the privileges to complete a specific action that would otherwise need to be performed by an Administrator.
    Alternatively, select the BuiltIn Restrict option to restrict the application or component from automatically completing the action.

  8. Click File > Save As > Live configuration on this computer to save your configuration changes.

With these changes in place, when any user within the Corporate\ITSupport-Level1 group attempts to uninstall a version of Microsoft OneDrive, both the Publisher name and the Version number must match before the uninstallation action can be performed. If the criteria for the application does not match, users will be prevented from completing the action, unless an Active Directory Policy dictates otherwise.

Related topics

System Controls