Share via

How to disable user can install app on their user profile?

Mr Law 0 Reputation points
2024-01-29T02:34:28.4433333+00:00

Server: Windows Server 2019 User: Windows 10 22H2 (19045.3930) We have built up a new domain, Client PC has joined the domain. All the Server GPO is working on the Client PC. Server enabled to turn off the Windows installer GPO a week ago. User's image

Unfortunately, user still can install app on their profile (such as Roblox). on path user\AppData\local\Roblox... User's image

any suggestions can disable user can install and execute these AppData's app ? Thanks

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,907 questions
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
12,066 questions
Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
5,799 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Ian Xue 39,471 Reputation points Microsoft Vendor
    2024-01-29T05:20:18.4033333+00:00

    Hi Mr Law,

    The Turn off Windows Installer GPO only applies to Windows installers, i.e. the MSI files. To block the exe file you can add an additional rule under "Computer Configuration" - "Policies" - "Windows Settings" - "Security Settings" - Software Restriction Policies.

    Best Regards,

    Ian Xue

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.