I found out recently that Apps especially like Chrome can be installed in user context.
I wanted to use the Uninstall Method of PMPC cloud to automatically uninstall the app as soon as it gets installed. But it only works if installed in system context.
I think this is not the only app where this "backdoor" of installing apps is possible for the user. As soon as a user gets to the .exe file he can install it as a user. Therefor I think in combination with the Discover unmanaged Apps Tool from PMPC cloud it would be a perfect addition to control unwanted Apps.
yes please adjust the detection rule for eg. chrome updates. For now it only affects HKLM so a huge amount of unpatched vulnerabilities remains due to the user-based installation.
Forcefully pushing Chrome to those clients does not help since it counts as a second installation, leaving the user-based one untouched.
This idea needs far more votes.