Windows 10: Creating a user account that does not allow downloads

My mother downloaded a virus to her computer. I want to prevent this from happening again so I want to create a user account that does not allow downloading of anything.

From what I read, a Standard account will not allow any type of downloading or installation.

However I was able to download and install Windows Essentials while logged into her account. Why is this?

Someone suggested the following. Would this work?

Where do I access Security Policy?

:)

 

Creating new user account will not allow work email address

There is a good article here
Cleaning up the #AzureAD and Microsoft account overlap that may help.

"Starting today, we’re blocking the ability to create a new personal Microsoft account using a work/school email address, when the email domain is configured in Azure AD.

What does this mean? If your organization uses Office 365 or other business services from Microsoft that rely on Azure AD, and if you’ve added a domain name to your Azure AD tenant, users will no longer be able to create a new personal
Microsoft account using an email address in your domain."

Hope that helps.

 

Creating new user account will not allow work email address

I am the company I.T. I have admin rights. So are you saying my employees have to have a personal account setup on our company computers?

 

A Standard account doesn't block internet access. You could create a Child account and see if the restrictions are adequate for your needs. See Child Account - Add or Remove from Your Family in Windows 10 and https://support.microsoft.com/en-us/...t-child-limits