How to stop users from installing software in Windows 10/11

Have you ever felt the necessity of prohibiting another user from installing particular software on your machine? If the answer to this question is a ‘Yes’, this article is just for you. Today we are going to show you how to block a user from installing/updating a particular software without your permission. Simply follow the instructions mentioned in any of this article and see the effect yourself.

Method 1 – Create a Standard user account

The easiest method to achieve this is to create a Standard (Non Administrative) user account and share this account with those users whom you do not want to have installation rights.

Note that, the standard account in Windows operating system do not have right to installation.

1 -Just search add, edit, or remove other users in Search box and click on the first search result which appears.

 

Add Remove Users Min

 

2 -Now, click on Add account to add users to your PC.

Settings Account Family Other Users Add Other User Account Min

Method 2 – Using Group Policy Editor

The easiest way to block users from installing softwares is to modify particular policy settings.

1. You have to press the Windows key+R keys together.

2. Then, write “gpedit.msc” and click on “OK“.

 

1 Run Gpedit

 

3. Once the Group Policy Editor opens up, go to this place –



Computer Configurations > Administrative templates > Windows Components > Windows Installer

 

4. Now, you will notice multiple policy settings on the right pane.

5. Then, right-click on the “Allow user control over installs” and then click on “Edit“.

 

Allow User Control Edit Min

 

6. Set the policy settings to “Disabled” to set the policy settings.

7. Finally, click on “Apply” and “OK” to save the settings.

 

Disabled Min

 

This policy setting will block the security features of Windows Installer preventing the users from changing the installation option, ultimately blocking the user from installing softwares without administrator permissions.

Method 3 – Using the Registry Editor

If you are using a Windows 10 Home, this method is especially for you.

1. First of all, press the Windows key+R keys together.

2. Then, type “regedit” and hit Enter.

 

Regedit In Run

 

Registry Editor screen will appear within seconds.

[

Warning

Registry Editor stores sensitive details of your system files and apps. Before you proceed further, we suggest creating a registry backup of the system.

If you haven’t backed up the registry, after opening the Registry Editor, click on “File“. Then click on “Export” to make a new backup on your computer.

 

Export Registry

 

In any case of data corruption, restoring this backup will help you resolve further problems.

]

3. Now, go to this location on the registry editor –

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Msi.Package\DefaultIcon

 

4. Then, double click on the “(Default)” key on the right-hand side to modify it.

 

Default Dc Min

 

5. Now, copy-paste this value in the box and click on “OK“.

C:\Windows\System32\msiexec.exe,1

 

1 Ok Min

 

Close the Registry Editor. Don’t forget to restart your computer.

This simple tweak will disable the Windows Installer on your system and the users can’t install new third-party softwares.

NOTE

After implementing this fix, you can’t install any software from package installers. So, if you want to reverse this change, do this –

1. Open the Registry Editor again.

2. Then, again go to the same location –

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Msi.Package\DefaultIcon

 

3. Next, double click on the “(Default)” value to access it.

 

Default Dc Min

 

4. Just set the value to this –

C:\Windows\System32\msiexec.exe,0

 

5. Then, click on “OK” to save it.

 

0 Ok Reverse Min

 

That’s it! Now you can install any softwares just like before.

Method 4 – Using the Applocker

You can use the Applocker from the Security Policy settings to create a blocking policy.

1. At first you have to press the Windows key+R keys together.

2. Write this run command here. Click on “OK“.

secpol.msc

 

Run Secpol.msc 1

 

Local Security Policy settings will open up.

3. Once the Local Security Policy window prevails, go this way –

Application Control Policies > Applocker > Packaged app Rules

 

4. On the right-hand side, right-click on the “Packaged app Rules” policy and click on “Create New Rule…” to edit it.

 

Create New Rule Min

 

5. Click on “Next” to go to the “Permissions” page.

 

Next 1 Min

 

6. On the Permissions page, click on the radio button beside the “Deny” to deny the application installation.

[

You can manage which account will affect this policy. Just, click on “Select…” in the ‘User or group:’ settings.

Type in the name of the particular user account you want to restrict and click on OK to save it.

]

7. Then, click on “Next” to go to the next step.

 

Deny Min

 

8. Here, you have two options –

Option A –

Use an installed packaged app as a reference‘- This option is applicable if you want to block users to install/update an existing app that is already installed on this system.

Example – Suppose, VLC player is installed on your computer. If you want to block a user from updating or installing another version of the app, select this option.

a. Select this option and click on “Select“.

 

Use An First Option Min

 

b. Form the list of installed apps, check the particular app you want to block the installation of.

c. Click on “OK” to select it.

 

Vlc Select Ok Min

 

 

Option B – 

Use a packaged app installer as reference‘- If you want to prohibit users from installing a new app from an installer (.appx) already downloaded on the system.

a. Select this option and click on “Browse“.

 

 

Use An Second Op Min

 

b. Go to the location where the app package is.

c. Select the installer package (*.appx or *.msix) which you want to block the installation of.

d. Click on “Open“.

 

Select The App Min

 

9. Once you have selected the application or the package installer, now you have three conditions or parameters to engage the blocking policy.



  • Publisher – This rule will restrict all the software installations from the particular publisher.
  • Package name –  This parameter allows you to restrict the installations by the package name.
  • Package version – This last one is for you if you want to restrict anyone updating the existing app installed on your computer.

10. Adjust the slider to select the particular policy according to your preference.

(Example – We have selected the “Package version” rule.   )

11. Click on “Next” to go to the next step.

 

Package Version Slider Min

 

12. Now, you will come to the ‘Exceptions‘ page. You can skip it if you don’t want to add an exception, click on “Next” to go to the next page.

 

Next Except New Min

 

If you want to add any exceptions follow these steps –

a. At first, click on “Add…“.

 

Add Exception Min

 

b. On the Publisher Exception page, you will see the similar options just as before  –

Use an installed packaged app as a reference‘- Select this option to block updating or another install of an installed app.



Use a packaged app installer as reference‘- User can’t install the software using the particular package installer.

Once you have configured the exception rule, click on “OK“.

 

Use An Exception Select Min

 

c. After you have set the exception parameter, click on “Next“.

 

Next Exception To Final Min

 

13. Finally, click on “Create” to create the policy settings on your computer.

 

Create Final Min

 

That’s it! This way you can restrict a particular user from installing/updating existing softwares on your computer.

Close all the opened windows and sign out from your computer. Now, log in to the system using the credentials of the blocked user. Now, try to install the particular software.