Prevent program installations from running

I have system blocked with restrictions so certain websites can not be visited. But the moment a person downloads and installs Tor Browser, the many many many days of hard work to restrict access to websites, all goes out the window.

So how can I block the ability to install programs like Tor Browser?

Please bear in mind, that the person does not have access to admin account, however is still able to install the Tor Browser. I have noticed this is not the case with many of the other installers and they request UAC password before installation can proceed. It is very annoying that for the Tor browser, the same doesn't happen.

So what can I do that will prevent, the Tor Browser installation from ever running?

I also tried the gpedit to disable windows installer, but it still runs. Is it possible that the Tor Browser installer does not use Windows installer so is unaffected by the restriction policy?

Many thanks

It is Windows 10 Home.

Also the account in which the Tor Browser is being installed is definitely Standard.

I thought that unless a person is Administrator, than they can not install anything. This is true for almost all the installers I have come across. Except Tor Browser setup file is going through the setup without any UAC being triggered.

Have you tried Hosts file to block websites.

Block Websites using Hosts File in Windows

FreeBooter said:

Have you tried Hosts file to block websites.

Block Websites using Hosts File in Windows

I have indeed. But this is not a very realistic approach. I have to scour the internet for every website that it might be possible to download Tor Browser. Which I had done, but it's possible to always miss some, and new websites popup over time.

So a more practical and realistic approach is to completely make it impossible for the setup file to run.

Callender said:

Try this reg file.

Contents:

reg file.zip

Thanks! That looks great!

One question however. It seems like just changing the name of the exe file and it will still work, no?

- - - Updated - - -

I guess the other question is, what makes some files implicitly require UAC(with the shield on the file) and the others don't? I know if I was to select a file I can change it's permissions, but that is for existing files. What about if the file or setup file has just been downloaded, what permissions does that have? Why the Tor Browser setup files requires no permissions and the others do?

This is what you have to block for the Alpha version. The location is user choice.

Code:

Tor Browser\Browser\firefox.exe

Tor Alpha is our default browser, learn why people are using an encrypted tunnel.

Why Tor browser(s) bothers you that much?

Those who download it are smarter than average, blocking would have a negative impulse on them. Not to mention productivity...

Take care,