How to prevent standard users from installing apps


  1. Posts : 22
    windows 10 ,7,8.1
       #1

    How to prevent standard users from installing apps


    H guys,
    Currently i have a laptop with 1 admin and 1 standard user account.
    I want to prevent standard users account from installing any programs and also prevent them from messing around with the settings like changing the wallpaper or themes or any other settings.

    my setup is like that
    Windows 10 pro

    thanks
      My Computer


  2. Posts : 11,370
    Windows 10 Home x64 Version 21H2 Build 19044.1706
       #2

    Gundja,

    Start menu,
    Windows system,
    Control panel,
    User accounts,
    User accounts [again - may not be necessary as it depends on your Control panel View setting],
    Change User Account Control settings,
    give Admin permission to proceed,
    Drag the slider all the way to the top,
    OK,
    give Admin permission to proceed.

    Now everybody, including your Admin account, will have to give Admin permission to proceed to be able to change Windows settings.

    Denis
      My Computer


  3. Posts : 5,478
    2004
       #3

    Standard users can't install old style programs (shared by all users) without Administrator approval.

    If you want to restrict them installing things from the Store as well afaik you'll need to uninstall the Store app as you can't disable it in Pro.

    On a computer that's running Windows 10 Pro, you upgrade to version 1511 of Windows 10. After the upgrade, you notice that the following Group Policy settings to disable Microsoft Store are not applied, and you cannot disable Microsoft Store:

    Cause

    This behavior is by design. In Windows 10 version 1511, these policies are applicable to users of the Enterprise and Education editions only.
    Source

    To remove store for current user
    (To remove Store app from current account only - NOT RECOMMENDED)
    Get-AppxPackage *WindowsStore* | Remove-AppxPackage
    Uninstall Apps in Windows 10 Apps Features Tutorials
      My Computer


  4. Posts : 22
    windows 10 ,7,8.1
    Thread Starter
       #4

    ok guys thanks for this response.
    I have already set up the slider to the top and still standard users are still able to install google chrome or mozilla firefox despite the admin privileges box pop up for password. even if they enter no password and click on yes, they are still able to install both browsers.

    that's weird ....
    Any other alternative solutions guys?

    thanks
      My Computer


  5. Posts : 5,478
    2004
       #5

    You'd need to block the exe not the installer if you want to restrict portable apps. Both Chrome and Firefox will install in %appdata% for current user only (actually they don't need to be installed even) so UAC will not help as they aren't writing to restricted area of system.

    It would be hard to block them as user could rename the program and put it anywhere so blocking chrome.exe or .exe running from %appdata% wouldn't work if you are up against a determined foe

    You could make it a child account perhaps Changes to Microsoft Family make it possible to block Chrome and Firefox in Windows 10 Anniversary Update
      My Computer


  6. Posts : 22
    windows 10 ,7,8.1
    Thread Starter
       #6

    i thought it would be so simple to block. i am using chrome and firefox as examples but i would like to apply this to everyone who logged in using a standard account and want to install any kind of software.
      My Computer


 

  Related Discussions
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 06:56.
Find Us




Windows 10 Forums