Group policy to Delete unauthorised software per logon

Question

I have a group of  on-site engineers (domain users but have local administrators rights) who are using laptops. They are required to install software occasionally when they travel, therefore I need a way using group policy to remove all these software not installed by group policy.
I only want the software(s) to be removed when they log-on to the company network/Domain/Active Directory. Can it be done per log-on?
I understand that one way to do it is to remove the registry of all software not installed by group policy so that it cannot be used. .Software installed by group policy should not be affected. Drivers for hardware should not be affected. 
Do you guys have any idea how to do so?
This topic first appeared in the Spiceworks Community

Answer 1

Hi Guys,I wrote below script for creating new user and granting it read only access but I'm getting attached error.Please help...Powershell$HostList = Get-Content C:\Users\malvika\Desktop\Hostnames.txtforeach ($server in $HostList){ $HostDetail = $server.Split(',') $HostName = ($server -split ',')[0] $userid = ($server -split ',')[1] $password = ($server -split ',')[2] $VCimpl = Get-VIServer -Server $HostName -User $userid -Password $password [Reflection.Assembly]::LoadWithPartialName("vmware.vim") # The name of the role to be assigned $roleLabel="Read-Only" #craete user New-VMHostAccount -Id Test -Password U!er -Description "Test User" #The name of the principal (user or group) that the role is assigned to $principal="Test" # set to false if principal is a user , not a group $principalIsGroup = $false $propagateToSubEntities = $true ...