Requiring Password for all program installation?

ammonation · 30 Aug 2017

Hi All,

Was wondering it is possible to require a password for any installation on Windows 10.

If possible, can anyone run-down how?

Berton · 30 Aug 2017

There may be a way in Group Policy Editor, can 'lock down' many things. With my Macintosh MacBook Pro Notebook that is the default, need the password for installing and updating.

TairikuOkami · 30 Aug 2017

You could use UAC for that. If you do not perform other admin tasks daily, it should not be bothersome.

Change User Account Control (UAC) Settings in Windows 10 Windows 10 Security System Tutorials

ammonation · 13 Sep 2017

Hi ran through your link but it never prompts for a password to install a program, just prompts a notification. Set it at the highest security level too.

TairikuOkami · 13 Sep 2017

Run CMD as admin and copy/paste:

Code:

reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorAdmin" /t REG_DWORD /d "3" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "ConsentPromptBehaviorUser" /t REG_DWORD /d "3" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableFullTrustStartupTasks" /t REG_DWORD /d "0" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableInstallerDetection" /t REG_DWORD /d "1" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableLUA" /t REG_DWORD /d "1" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableSecureUIAPaths" /t REG_DWORD /d "1" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUwpStartupTasks" /t REG_DWORD /d "0" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableUIADesktopToggle" /t REG_DWORD /d "1" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "EnableVirtualization" /t REG_DWORD /d "0" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "FilterAdministratorToken" /t REG_DWORD /d "1" /f
reg add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v "PromptOnSecureDesktop" /t REG_DWORD /d "0" /f

Try3 · 13 Sep 2017

ammonation,

If you wanted a password to be enforced you would normally have to change over to a Standard user account.

It prompts for a password if the user account you are signed into is a Standard user account.
If you are logged into an Admin account, it just prompts for confirmation with a Yes / No choice instead.

The Registry changes described above might be able to achieve the non-standard behaviour that you want.

Denis

20Seven · 09 Jun 2021

I know this method but it does not require password for all installations, only those that require the administrator privilege:
- Open Local Security Policy (secpol.msc), go to Local Policies -> Security Options -> User Account Control: Behavior of the elevation prompt for administrators in Admin Approval Mode. Change this setting to "Prompt for credentials on the secure desktop"

Requiring Password for all program installation?-capture.png

You can also use this setting to enable password prompt for modifying important settings or opening administrative tools like Task Scheduler, Registry Editor,... (require that UAC Settings is "Always notify")