Anyone else neurotic and have this GPO enable in prod for their VDA's? It stops anything from being installed, which I like, however we're POC'ing Parallels RAS and it does some stuff during its rasprep which cause an issue with this enabled, specifically some FSLogix stuff. Not a big deal to move the clones to another ou, reboot, and then move them back, but I wonder if this is really necessary anymore. My thought many years ago was ransonware based... Windows Components/Windows Installerhide Policy Setting Comment Turn off Windows Installer Enabled Disable Windows Installer Always