How to prevent standard users from installing apps

H guys,
Currently i have a laptop with 1 admin and 1 standard user account.
I want to prevent standard users account from installing any programs and also prevent them from messing around with the settings like changing the wallpaper or themes or any other settings.

my setup is like that
Windows 10 pro

thanks

Standard users can't install old style programs (shared by all users) without Administrator approval.

If you want to restrict them installing things from the Store as well afaik you'll need to uninstall the Store app as you can't disable it in Pro.

On a computer that's running Windows 10 Pro, you upgrade to version 1511 of Windows 10. After the upgrade, you notice that the following Group Policy settings to disable Microsoft Store are not applied, and you cannot disable Microsoft Store:

Cause

This behavior is by design. In Windows 10 version 1511, these policies are applicable to users of the Enterprise and Education editions only.

Source

To remove store for current user

(To remove Store app from current account only - NOT RECOMMENDED)
Get-AppxPackage *WindowsStore* | Remove-AppxPackage

Uninstall Apps in Windows 10 Apps Features Tutorials

ok guys thanks for this response.
I have already set up the slider to the top and still standard users are still able to install google chrome or mozilla firefox despite the admin privileges box pop up for password. even if they enter no password and click on yes, they are still able to install both browsers.

that's weird ....
Any other alternative solutions guys?

thanks

You'd need to block the exe not the installer if you want to restrict portable apps. Both Chrome and Firefox will install in %appdata% for current user only (actually they don't need to be installed even) so UAC will not help as they aren't writing to restricted area of system.

It would be hard to block them as user could rename the program and put it anywhere so blocking chrome.exe or .exe running from %appdata% wouldn't work if you are up against a determined foe

You could make it a child account perhaps Changes to Microsoft Family make it possible to block Chrome and Firefox in Windows 10 Anniversary Update

i thought it would be so simple to block. i am using chrome and firefox as examples but i would like to apply this to everyone who logged in using a standard account and want to install any kind of software.