Windows 10: Can I somehow password protect Local Group Policy?

So here's my issue. I want to block some programs from ever running on the computer. I do that either by using applocker or Software Restriction policies blocking the name of the executables and their digital signature which works great.

The problem is I don't want to make a standard user account for the other users (whom I'm trying to prevent from using these programs) since we use a lot of programs that share settings which would make it incredibly inconvenient. Also I want the other users to be able to install programs freely without the administrator's permission.

So my question is is there a way to lock someone out of local group policy or playing with the registry without making a new account?

:)

 

Local group administrator password

is 'local group administrator' a user you or someone else has created? (if so Frederik has given you the answer)

or are you confusing it with the administrators group on the local computer which contains all users with administrative permissions?

the group does not have a password, the users do. when asked for local group administrator password, you can use any user from that group.

if you log on as an administrator you can change/reset the password of other local users.

if you have forgotten the password for a Microsoft account you can reset it
here

 

NETWORK ISSUE.

Hi Sridhar,

There are cases wherein if a password is set for a guest account, the toggle button for password protected sharing automatically switches on. You may perform these steps on how to turn it off:

• Type in mmc.exe in Coratana and press
  Enter.
• Click File.
• Select and click Add/Remove Snap-in.
• Select and click Local Users and Groups.
• Click Add>.
• Click Finish.
• Click OK. Once done, Local Users and Groups (Local) will appear under
  Name.
  
• Double click Local Users and Groups (Local).
  
• Double click Users folder.
• Right click Guest.
• Select Set Password.
• Click Proceed.
• Make sure password is blank and click OK.
• Restart your computer.

Once done, this will allow you to turn off password protected sharing.

Hope to hear your feedback about the steps provided.

 

Have you thought about the default user?

If you set-up the default user profile with all the applications and you set them up you can then create standard users for each user and their accounts will be set-up as a copy of the daufult user profile including the apps and settings, you can then further control the security using local group policy, other than this you really need a server to handle security (which I know is not always a financially viable option.

Default User Profile - Customize in Windows 10 - Windows 10 Tutorials

You can also set up your own user and then make that the default user, although that is a little more complex

Customize the Default User Profile by Using CopyProfile

 

Thank you for the reply.
I will give the default user a try and see how that goes.

 

Is there a way to give standard users a little more leeway? I'm testing how standard users account work and every program I try to run is asking me for admin's password? Also tried to turn UAC off but I don't think it's possible as it's grayed out.