Add clietn settings option to disable software distribution (apps and packages)
We can turn off software updates, hw inventory, sw inventory, and even the ability to remote control with the client, but there isn't a way to easily disable software deployments (application and packages). In healthcare, we have machines that we cannot patch so we turn off the update component as an added layer of protection. We also have systems we do not want software deployed to as well and there are ways to try and prevent targeting, just turning off that component on the client would be much easier with a client setting option.
Jeroen Bakker commented
This can partially be achieved with an existing client setting:
Setting "Client Policy - Enable user policy on clients" to "No" will prevent any user targeted software from installing. We use this setting on all of our (Remote Desktop) servers to prevent users from accidentally triggering installations.
Daniel Ratliff commented
This is very much needed in non-persistent environments (Linked clones, write filters, streamed VMs, etc). Currently you either have to disable the agents locally via a baseline which is fighting a losing battle or get creative with your limiting collections and RBAC to limit the devices that can be deployed to.