Windows 10: How to prevent standard users from installing apps

  1.    15 Jan 2018 #1

    How to prevent standard users from installing apps


    H guys,
    Currently i have a laptop with 1 admin and 1 standard user account.
    I want to prevent standard users account from installing any programs and also prevent them from messing around with the settings like changing the wallpaper or themes or any other settings.

    my setup is like that
    Windows 10 pro

    thanks
      My ComputerSystem Spec


  2. Posts : 887
    Windows 10 Home x64 and Pro x86
       15 Jan 2018 #2

    Gundja,

    Start menu,
    Windows system,
    Control panel,
    User accounts,
    User accounts [again - may not be necessary as it depends on your Control panel View setting],
    Change User Account Control settings,
    give Admin permission to proceed,
    Drag the slider all the way to the top,
    OK,
    give Admin permission to proceed.

    Now everybody, including your Admin account, will have to give Admin permission to proceed to be able to change Windows settings.

    Denis
      My ComputerSystem Spec

  3.    15 Jan 2018 #3

    Standard users can't install old style programs (shared by all users) without Administrator approval.

    If you want to restrict them installing things from the Store as well afaik you'll need to uninstall the Store app as you can't disable it in Pro.

    On a computer that's running Windows 10 Pro, you upgrade to version 1511 of Windows 10. After the upgrade, you notice that the following Group Policy settings to disable Microsoft Store are not applied, and you cannot disable Microsoft Store:

    Cause

    This behavior is by design. In Windows 10 version 1511, these policies are applicable to users of the Enterprise and Education editions only.
    Source

    To remove store for current user
    (To remove Store app from current account only - NOT RECOMMENDED)
    Get-AppxPackage *WindowsStore* | Remove-AppxPackage
    Uninstall Apps in Windows 10 Apps Features Tutorials
      My ComputerSystem Spec

  4.    15 Jan 2018 #4

    ok guys thanks for this response.
    I have already set up the slider to the top and still standard users are still able to install google chrome or mozilla firefox despite the admin privileges box pop up for password. even if they enter no password and click on yes, they are still able to install both browsers.

    that's weird ....
    Any other alternative solutions guys?

    thanks
      My ComputerSystem Spec

  5.    15 Jan 2018 #5

    You'd need to block the exe not the installer if you want to restrict portable apps. Both Chrome and Firefox will install in %appdata% for current user only (actually they don't need to be installed even) so UAC will not help as they aren't writing to restricted area of system.

    It would be hard to block them as user could rename the program and put it anywhere so blocking chrome.exe or .exe running from %appdata% wouldn't work if you are up against a determined foe

    You could make it a child account perhaps Changes to Microsoft Family make it possible to block Chrome and Firefox in Windows 10 Anniversary Update
      My ComputerSystem Spec

  6.    16 Jan 2018 #6

    i thought it would be so simple to block. i am using chrome and firefox as examples but i would like to apply this to everyone who logged in using a standard account and want to install any kind of software.
      My ComputerSystem Spec


 

Related Threads
How to Enable or Disable Standard Users from Changing BitLocker PIN or Password in Windows 10 BitLocker Drive Encryption is a data protection feature that integrates with the operating system and addresses the threats of data theft or exposure...
Hi guys, All our domain users are logged in as standard users, hence they cannot run .exe file. I want all users to allow a software application which runs only with an .exe file extension. How Can i achieve it??
Does anyone have instructions to change the default background on Windows 10 Pro? I want everyone that logs in to get our customized logo. Thank you in advance.
Hi there If you want to pin Metro apps / standard apps to desktop / create a custom toolbar with these as CASACADABLE items it's fairly simple. I made a post way back in W8.1 about this --method still works - no reg hacks, XAML knowledge etc...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 07:06.
Find Us