How to disable user can install app on their user profile?

Mr Law 0 Reputation points

Server: Windows Server 2019 User: Windows 10 22H2 (19045.3930) We have built up a new domain, Client PC has joined the domain. All the Server GPO is working on the Client PC. Server enabled to turn off the Windows installer GPO a week ago. User's image

Unfortunately, user still can install app on their profile (such as Roblox). on path user\AppData\local\Roblox... User's image

any suggestions can disable user can install and execute these AppData's app ? Thanks

Windows Server 2019
Windows Server 2019
A Microsoft server operating system that supports enterprise-level management updated to data storage.
3,336 questions
Windows 10
Windows 10
A Microsoft operating system that runs on personal computers and tablets.
10,198 questions
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,515 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Ian Xue (Shanghai Wicresoft Co., Ltd.) 27,831 Reputation points Microsoft Vendor

    Hi Mr Law,

    The Turn off Windows Installer GPO only applies to Windows installers, i.e. the MSI files. To block the exe file you can add an additional rule under "Computer Configuration" - "Policies" - "Windows Settings" - "Security Settings" - Software Restriction Policies.

    Best Regards,

    Ian Xue

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments No comments