H guys,
Currently i have a laptop with 1 admin and 1 standard user account.
I want to prevent standard users account from installing any programs and also prevent them from messing around with the settings like changing the wallpaper or themes or any other settings.
my setup is like that
Windows 10 pro
thanks
Gundja,
Start menu,
Windows system,
Control panel,
User accounts,
User accounts [again - may not be necessary as it depends on your Control panel View setting],
Change User Account Control settings,
give Admin permission to proceed,
Drag the slider all the way to the top,
OK,
give Admin permission to proceed.
Now everybody, including your Admin account, will have to give Admin permission to proceed to be able to change Windows settings.
Denis
Standard users can't install old style programs (shared by all users) without Administrator approval.
If you want to restrict them installing things from the Store as well afaik you'll need to uninstall the Store app as you can't disable it in Pro.
SourceOn a computer that's running Windows 10 Pro, you upgrade to version 1511 of Windows 10. After the upgrade, you notice that the following Group Policy settings to disable Microsoft Store are not applied, and you cannot disable Microsoft Store:
Cause
This behavior is by design. In Windows 10 version 1511, these policies are applicable to users of the Enterprise and Education editions only.
To remove store for current userUninstall Apps in Windows 10 Apps Features Tutorials(To remove Store app from current account only - NOT RECOMMENDED)
Get-AppxPackage *WindowsStore* | Remove-AppxPackage
ok guys thanks for this response.
I have already set up the slider to the top and still standard users are still able to install google chrome or mozilla firefox despite the admin privileges box pop up for password. even if they enter no password and click on yes, they are still able to install both browsers.
that's weird ....
Any other alternative solutions guys?
thanks
You'd need to block the exe not the installer if you want to restrict portable apps. Both Chrome and Firefox will install in %appdata% for current user only (actually they don't need to be installed even) so UAC will not help as they aren't writing to restricted area of system.
It would be hard to block them as user could rename the program and put it anywhere so blocking chrome.exe or .exe running from %appdata% wouldn't work if you are up against a determined foe
You could make it a child account perhaps Changes to Microsoft Family make it possible to block Chrome and Firefox in Windows 10 Anniversary Update
i thought it would be so simple to block. i am using chrome and firefox as examples but i would like to apply this to everyone who logged in using a standard account and want to install any kind of software.
Quote
