Give access to specific apps for Local User

Page 1 of 2 12 LastLast

  1. Posts : 12
    Windows 10
       #1

    Give access to specific apps for Local User


    I'm the admin on my PC, but have my kids' accounts as Local accounts on the same machine:

    Give access to specific apps for Local User-image.png

    When my kids log in, I'd like them to be able to launch and access only specific apps that I have installed and working for my account (e.g., IrfanView, Minecraft, Affinity Designer, MS Store, etc.). When they're logged in, these apps show in their start menu, but clicking them does nothing.

    Without making them admins, how can I grant access to only specific apps?
      My ComputerSystem Spec

  2. dalchina's Avatar
    Posts : 19,865
    Win 10 Pro (1903)
       #2

    Hi, here's how to access the Store when logged in as a local user.
    Use Local account with Windows Store

    Note: a Microsoft account is needed.

    However you say the Store doesn't respond...
    Is the internet accessible when they are logged in?
    Various general fixes here, but yours may be a different issue.
    6 Ways To Fix Windows Store Won't Open - Troubleshooter

    Irfanview: try installing the 'desktop' version - not the Store app.
    IrfanView 64-bit version

    Note that having people log in to your PC potentially exposes you to all manner of problems as so much damage can be done all to readily.

    I suggest it's imperative that you use disk imaging on a daily schedule, so that worst case you can have your PC up and running as it was the day before, relatively quickly - essential for a busy parent.

    Macrium reflect (free) + large enough external storage.
      My ComputersSystem Spec

  3. bro67's Avatar
    Posts : 7,346
    Mac OS Mojave
       #3

    Is this a Pro or Home version of Windows 10? I would create a user group for the kids and assign policies to that group. You can use Jumpcloud if Pro, Home you would be best to upgrade to Pro.

    This is how you can create a GPO. https://www.technipages.com/prevent-users-from-running-certain-programs

    Using Jumpcloud will allow you to lock down the computer better.
      My ComputersSystem Spec


  4. Posts : 12
    Windows 10
    Thread Starter
       #4

    dalchina said: View Post
    However you say the Store doesn't respond...
    Is the internet accessible when they are logged in?
    Yes, internet is accessible. The Store window opens for a seconds, and then closes. I assumed this was somehow related to permissions.

    dalchina said: View Post
    Irfanview: try installing the 'desktop' version - not the Store app.
    IrfanView 64-bit version
    That works for Irfanview, but what about another dozen apps I might want to give them access to as they get older?

    dalchina said: View Post
    Note that having people log in to your PC potentially exposes you to all manner of problems as so much damage can be done all to readily.
    I suggest it's imperative that you use disk imaging on a daily schedule, so that worst case you can have your PC up and running as it was the day before, relatively quickly - essential for a busy parent.

    Macrium reflect (free) + large enough external storage.
    I have disk imaging setup daily to both cloud (Wasabi, daily) and a NAS (weekly).

    - - - Updated - - -

    bro67 said: View Post
    Is this a Pro or Home version of Windows 10? I would create a user group for the kids and assign policies to that group. You can use Jumpcloud if Pro, Home you would be best to upgrade to Pro.
    This is how you can create a GPO. Prevent Users From Running Certain Programs - Technipages

    Using Jumpcloud will allow you to lock down the computer better.
    Thanks. Win 10 Pro.

    I'll check out group policies.

    - - - Updated - - -
    @bro67, I see that if my "Run only specified Win apps" is Not configured (the default setting) or Disabled, users should be able to run all applications:

    Give access to specific apps for Local User-image.png

    So, I'm wondering what the policy setting should be.

    I'd rather have an exclusive setting (let them run only what I want) rather than an inclusive one (run everything, and specify what they can't--there's too many appliccations on my PC).

    - - - Updated - - -

    I found this post on TenForums and figured out how to create a local Group policy for one of my kids:

    Apply Local Group Policy to Specific User in Windows 10

    I went into "Run only specified Win apps" for that account and Disable it. Then, I logged in as my kid, and tried to launch different programs:


    • Chrome - Launches fine, verified internet connection
    • Store - Nothing happens
    • IrfanView - Installed for me locally (from the install file, not the Store), but doesn't appear for my kid
    • Inkscape - Won't launch (works when I launch it from my account)
    • Affinity Designer - Won't launch (works when I launch it from my account)
    • 3d View - Won't launch (works when I launch it from my account)


    If it helps, I made this video that shows me going through and launching each of these, above so you can see what's happening:

    https://www.screencast.com/t/DJxtDWhLsQyQ
      My ComputerSystem Spec

  5. bro67's Avatar
    Posts : 7,346
    Mac OS Mojave
       #5

    You can always try and create a profile with only those programs you want them to see in their Start Menu under Appdata/Local.

    Also look at Ultimate Windows Tweaker. Ultimate Windows Tweaker 4 for Windows 10

    Jumpcloud is a free and easy way to lok the system down.
      My ComputersSystem Spec

  6. dalchina's Avatar
    Posts : 19,865
    Win 10 Pro (1903)
       #6

    Thank you for your reply.

    I have installed and working for my account (e.g., IrfanView, Minecraft, Affinity Designer, MS Store, etc.).
    You must distinguish between
    - traditional desktop programs which may usually be installed EITHER for all users OR for one particular user.
    Hence my example of Irfanview.
    - Store apps which are installed additionally to those provided by MS with Windows
    - Store apps provided de facto when an account is created

    I suspect some- but not all- of what you are complaining of results from confusion here.

    When you download and install an app from the Store, you 'own' it.

    The Store window opens for a seconds, and then closes.
    Store: you say this closes immediately for local users. That is indeed a problem on your system; I've just created a local user and Store runs normally. I have given a URL with some Store fixes above.

    There are tutorials in the Tutorial section to reset and reregister the Store, for example.
      My ComputersSystem Spec



  7. Posts : 12
    Windows 10
    Thread Starter
       #7

    dalchina said: View Post
    Thank you for your reply.
    You must distinguish between
    - traditional desktop programs which may usually be installed EITHER for all users OR for one particular user.
    Hence my example of Irfanview.
    - Store apps which are installed additionally to those provided by MS with Windows
    - Store apps provided de facto when an account is created
    I suspect some- but not all- of what you are complaining of results from confusion here.
    When you download and install an app from the Store, you 'own' it.
    This makes sense and explains why I don't see some programs in the kids' start menu but I do in mine.
    dalchina said: View Post
    Store: you say this closes immediately for local users. That is indeed a problem on your system; I've just created a local user and Store runs normally. I have given a URL with some Store fixes above.
    There are tutorials in the Tutorial section to reset and reregister the Store, for example.
    I went through and tried all six suggestions in the tutorial, including reseting and re-registering the store. No luck.

    Then, I decided to check the event logs for right after I tried to launch the Store, and found this warning:

    Access to C:\Program Files\WindowsApps\Microsoft.WindowsStore_11909.1001.7.0_x64__8wekyb3d8bbwe\WinStore.App.exe has been restricted by your Administrator by policy rule {8c2bf56d-d649-4b87-8177-8c2fe0838029}.

    I also saw similar warnings for other apps I tried to open and got similar warnings.

    It should be noted that my PC came w/ Home and I updated to Pro a couple of weeks ago--I'm not sure, but my thought is that there may be more restrictive policies under Pro than there were under Home.

    I now need to try and figure out which policies are preventing this, but at least I'm making progress.
      My ComputerSystem Spec

  8. dalchina's Avatar
    Posts : 19,865
    Win 10 Pro (1903)
       #8

    Hi, you might try this blanket option:
    Reset Local Group Policy Editor Settings to Default in Windows 10

    or you could open the group policy editor
    gpedit.msc

    and use its filter (via rt click) to list only configured policies
    Give access to specific apps for Local User-snap-2019-09-06-21.03.38.png

    to try to find the ones of interest.

    It sounds as if perhaps some registry settings equivalent ot group policies may have been carried over into your Pro installation. Just a guess.
    Last edited by dalchina; 1 Week Ago at 12:49.
      My ComputersSystem Spec

  9. bro67's Avatar
    Posts : 7,346
    Mac OS Mojave
       #9

    dalchina, or even go as far as building a GPO profile specifuc to setting up a profile as a “Kiosk” mode.
      My ComputersSystem Spec


  10. Posts : 12
    Windows 10
    Thread Starter
       #10

    @dalchina, thanks for the suggestion.

    I tried your blanket option, and that didn't work.

    I filtered per your suggestion:

    Give access to specific apps for Local User-image.png

    However, it seems there are no settings for that filter:

    Give access to specific apps for Local User-image.png
      My ComputerSystem Spec


 
Page 1 of 2 12 LastLast

Related Threads
How to Apply Local Group Policies to Specific User in Windows 10 The Local Group Policy Editor (gpedit.msc) is a Microsoft Management Console (MMC) snap-in that provides a single user interface through which all the the Computer Configuration...
New consumer notebook w/ win 10 pro. 2 admin accts and one local. The local acct requires just a user name and a password to login and get to the desktop. From the one admin acct that I am using for the most part can I from that account unilaterally...
... with UAC prompt? (sorry this didn't fit the title space) When I search the internet I keep finding tutorials, some safe, others unsafe about giving administrator permissions to a user that is not an administrator. Unfortunately, all of...
93485 When i was going to activate cortana it said to give apps to access my contacts. But when I went to settings all options were in grey colour (cant active) and missing contacts on off button too. ( can see in screenshot) please tell a way to...
I have discovered that there is a difference between the original local "Administrator" account and my (local) admin account. For instance my admin account cannot add a new user, whereas "Administrator" can. I absolutely do not want an MS...
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 11:29.
Find Us