User restrictions

Question

How can I restrict a user profile from downloading programs?

Answer 1

Hello TJhere, thanks to contact the Microsoft Community. My name is Wendy Jones, I am an Independent Advisor.

To block downloads you can create a GPO in the organization, you can check the steps for that process on the links below:

https://thesolving.com/server-room/how-to-softw...

https://www.thewindowsclub.com/how-to-prevent-u...

If you can not create GPO you can disable downloads options from the different browsers and Microsoft store:

For Internet Explorer:

 Open Internet Explorer.

From the Tools menu, select Internet Options.

In the Internet Options dialog box, click the Security tab.

Click Custom Level.

In the Security Settings dialog box, scroll to the Downloads section.

Under File download, select Disable, and then click OK.

For Chrome:

https://support.google.com/chrome/a/answer/7579...

To disable Microsoft store downloads:

https://www.techrepublic.com/article/how-to-man...

https://www.urtech.ca/2015/09/solved-how-to-dis...

Check all this information and let me know if that work for you.

_____________________________________________________________

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.

Answer 2

You cannot restrict this. If the account in question is a Users account, also known as a Standard account, it won't be able to install the programs.

A third-party parental control application might be able to filter files ending in .exe or .msi but there are other ways to obtain programs, like from Microsoft Store.

Answer 3

Hi,

My name is Angel. I am an Independent Advisor. Thank you for posting in Microsoft Community.

To Block users from installing or running programs in Windows 10.

Type gpedit.msc in start search and hit Enter to open the Group Policy Editor. Navigate to Computer Configurations > Administrative Templates

Windows Components > Windows Installer. In RHS pane double-click on Disable Windows Installer. Configure the option as required.

This setting can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. If you enable this setting, you can use the options in the Disable Windows Installer box to establish an installation setting.

The “Never” option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional, and Windows Vista when the policy is not configured.

The “For non-managed apps only” option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured.

The “Always” option indicates that Windows Installer is disabled.

Edit: this blocks programs installed via the Windows Installer. I am unaware of a way to block software installation outside of locking down the Windows Installer.

Source:

https://www.thewindowsclub.com/how-to-prevent-u...

Hope the information provided is useful. If the issue persists, reply here and we will be glad to help you.

Angel.

Note: This is a non-Microsoft website. The page appears to be providing accurate, safe information. Watch out for ads on the site that may advertise products frequently classified as a PUP (Potentially Unwanted Products). Thoroughly research any product advertised on the site before you decide to download and install it.