Have you ever felt the necessity of prohibiting another user from installing particular software on your machine? If the answer to this question is a ‘Yes’, this article is just for you. Today we are going to show you how to block a user from installing/updating a particular software without your permission. Simply follow the instructions mentioned in any of this article and see the effect yourself.
Method 1 – Using Group Policy Editor
The easiest way to block users from installing softwares is to modify particular policy settings.
1. You have to press the Windows key+R keys together.
2. Then, write “gpedit.msc” and click on “OK“.
3. Once the Group Policy Editor opens up, go to this place –
Computer Configurations > Administrative templates > Windows Components > Windows Installer
4. Now, you will notice multiple policy settings on the right pane.
5. Then, right-click on the “Allow user control over installs” and then click on “Edit“.
6. Set the policy settings to “Disabled” to set the policy settings.
7. Finally, click on “Apply” and “OK” to save the settings.
This policy setting will block the security features of Windows Installer preventing the users from changing the installation option, ultimately blocking the user from installing softwares without administrator permissions.
Method 2 – Using the Registry Editor
If you are using a Windows 10 Home, this method is especially for you.
1. First of all, press the Windows key+R keys together.
2. Then, type “regedit” and hit Enter.
Registry Editor screen will appear within seconds.
Registry Editor stores sensitive details of your system files and apps. Before you proceed further, we suggest creating a registry backup of the system.
If you haven’t backed up the registry, after opening the Registry Editor, click on “File“. Then click on “Export” to make a new backup on your computer.
In any case of data corruption, restoring this backup will help you resolve further problems.
3. Now, go to this location on the registry editor –
4. Then, double click on the “(Default)” key on the right-hand side to modify it.
5. Now, copy-paste this value in the box and click on “OK“.
Close the Registry Editor. Don’t forget to restart your computer.
This simple tweak will disable the Windows Installer on your system and the users can’t install new third-party softwares.
After implementing this fix, you can’t install any software from package installers. So, if you want to reverse this change, do this –
1. Open the Registry Editor again.
2. Then, again go to the same location –
3. Next, double click on the “(Default)” value to access it.
4. Just set the value to this –
5. Then, click on “OK” to save it.
That’s it! Now you can install any softwares just like before.
Method 3 – Using the Applocker
You can use the Applocker from the Security Policy settings to create a blocking policy.
1. At first you have to press the Windows key+R keys together.
2. Write this run command here. Click on “OK“.
Local Security Policy settings will open up.
3. Once the Local Security Policy window prevails, go this way –
Application Control Policies > Applocker > Packaged app Rules
4. On the right-hand side, right-click on the “Packaged app Rules” policy and click on “Create New Rule…” to edit it.
5. Click on “Next” to go to the “Permissions” page.
6. On the Permissions page, click on the radio button beside the “Deny” to deny the application installation.
You can manage which account will affect this policy. Just, click on “Select…” in the ‘User or group:’ settings.
Type in the name of the particular user account you want to restrict and click on OK to save it.
7. Then, click on “Next” to go to the next step.
8. Here, you have two options –
Option A –
‘Use an installed packaged app as a reference‘- This option is applicable if you want to block users to install/update an existing app that is already installed on this system.
Example – Suppose, VLC player is installed on your computer. If you want to block a user from updating or installing another version of the app, select this option.
a. Select this option and click on “Select“.
b. Form the list of installed apps, check the particular app you want to block the installation of.
c. Click on “OK” to select it.
Option B –
‘Use a packaged app installer as reference‘- If you want to prohibit users from installing a new app from an installer (.appx) already downloaded on the system.
a. Select this option and click on “Browse“.
b. Go to the location where the app package is.
c. Select the installer package (*.appx or *.msix) which you want to block the installation of.
d. Click on “Open“.
9. Once you have selected the application or the package installer, now you have three conditions or parameters to engage the blocking policy.
- Publisher – This rule will restrict all the software installations from the particular publisher.
- Package name – This parameter allows you to restrict the installations by the package name.
- Package version – This last one is for you if you want to restrict anyone updating the existing app installed on your computer.
10. Adjust the slider to select the particular policy according to your preference.
(Example – We have selected the “Package version” rule. )
11. Click on “Next” to go to the next step.
12. Now, you will come to the ‘Exceptions‘ page. You can skip it if you don’t want to add an exception, click on “Next” to go to the next page.
If you want to add any exceptions follow these steps –
a. At first, click on “Add…“.
b. On the Publisher Exception page, you will see the similar options just as before –
Use an installed packaged app as a reference‘- Select this option to block updating or another install of an installed app.
‘Use a packaged app installer as reference‘- User can’t install the software using the particular package installer.
Once you have configured the exception rule, click on “OK“.
c. After you have set the exception parameter, click on “Next“.
13. Finally, click on “Create” to create the policy settings on your computer.
That’s it! This way you can restrict a particular user from installing/updating existing softwares on your computer.
Close all the opened windows and sign out from your computer. Now, log in to the system using the credentials of the blocked user. Now, try to install the particular software.
Additional Tip –
You can provide a guest account or a non-administrative account to the particular user. A standard account user can’t install or uninstall apps from the system without the administrator’s consent.
Sambit is a Mechanical Engineer By qualification who loves to write about Windows 10 and solutions to weirdest possible problems.