Using Intune, how to block users from installing software from google or other bowser? How to also block users from uninstalling any software from the computer? How to block them from accessing in control panel and ‘Add or remove programs’?

TechQ 236 Reputation points
2022-12-15T11:35:10.973+00:00

Please also tell me how to configure this in Intune Security baseline.
If possible please send picture so it’s more clear, thank you.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,662 questions
0 comments
Accepted answer
  1. Lu Dai-MSFT 28,356 Reputation points
    2022-12-16T02:14:33.2+00:00

    @MitunDas-7581 Thanks for posting in our Q&A.

    I didn't find these settings in Intune Security baseline policy. However, some settings are in other policies.

    Block users from installing software from google or other bowsers
    ---"Apps from store only" in device restriction policy. When we set it to "Store Only", Intent is to prevent malicious content from affecting your user devices when downloading executable content from the internet. When users try to install apps from the internet, the installation is blocked. Users see a message recommending they download apps from the Microsoft Store.
    https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-windows-10#app-store
    271272-image.png

    Block users from uninstalling any software from the computer
    ---There is no such setting.

    Block them from accessing in control panel.
    ---"Prohibit access to Control Panel and PC settings" in Settings Catalog. Please refer to this link.
    Note: Non-Microsoft link, just for the reference.
    271271-image.png

    Hope it will help.

    If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Md. Shamim Reza 0 Reputation points
    2023-01-29T09:33:50.72+00:00

    Block users from uninstalling any software from the computer and Block them from accessing the control panel are possible by these settings.1

  2. Sivasankaran J 0 Reputation points
    2023-06-19T12:30:30.75+00:00

    @TechQ - If you want to restrict the software installations on your intune managed devices, please choose Endpoint Privilege Management option in your Intune portal.

    Microsoft Intune Admin center -> Endpoint Security -> Under Manage -> Endpoint Privilege Management

    If you don't have such license, please buy it from below,

    Microsoft Intune Admin center -> Tenant administration -> Intune add-ons -> Endpoint Privilege Management - Available for trial or purchase