How to configure restrictions on a user account in Windows 10?

Question

Hi,

I want to configure restrictions on a user account in Windows 10 as following.

1. The user shouldn’t be able to install and uninstall an application.
2. The user shouldn’t be able to view installed applications.
3. Some applications to be blocked.
4. Folder A is in Drive D and Folder A is assigned for the user so that the user can keep all stuff in Folder A. The user is not allowed to access any content of Drive D except Folder A.

Be it local group policy, registry or by third-party applications; please let me know, how to configure these restrictions?

With Regards
NndnG

Answer 1

Hi NndnG,
For your demand, I think it is possible to make it.
Restriction 1: just need to remove this user’s administrator permission, a standard user can’t install and uninstall apps.
Restriction 2: you need to block Access to Windows 10 Settings and Control Panel for that user. Open group policy editor, navigate to User Configuration\ Administrative templates\Control Panel\Prohibit access to Control Panel and PC settings, enable it. You could also hide Specific Control Panel Items at the same time.
Restriction 3: it’s easy. Open Group Policy Editor, expand User Configuration\Administrative Templates\System\Don’t run specified Windows applications.
Restriction 4: Create Folder A in Drive D and give full control permission to that user, then remove all other folders NTFS permission include Full Control, Modify, Read & Execute, Read, Write, Special Permissions for User.
The idea in Restriction 4 will influence other standard users on this computer.

-------------------------------------------------------------------------------------

If the Answer is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

Answer 2

I have a similar problem and this is good advice, but how do I apply it to just the one guest account/user? These restrictions are applied to all users/accounts, including my administrator account, do I have to do this back and forth every time I want to make a restricted change or every time I log in/out as administrator? Or is there some clever way to make it permanently stick to just the guest account/accounts?

Best regards and sincerely yours and all that,
Stargazer