Windows 10: How to prevent standard users from installing apps

H guys,
Currently i have a laptop with 1 admin and 1 standard user account.
I want to prevent standard users account from installing any programs and also prevent them from messing around with the settings like changing the wallpaper or themes or any other settings.

my setup is like that
Windows 10 pro

thanks

:)

 

how to prevent users from installing software

Hi there, did you ever work out a way of doing this, I'm having exactly the same challenge!

Many thanks for any advice!

 

how to prevent users from installing software

I did. All the PCs have 2 local accounts 1 Admin and the other is a standard user. My staff only have access to the standard user log in. I have access to the admin log in. I figured that with Office 365, Intune & Azure AD subscriptions there has to be
an easier way.

 

Gundja,

Start menu,
Windows system,
Control panel,
User accounts,
User accounts [again - may not be necessary as it depends on your Control panel View setting],
Change User Account Control settings,
give Admin permission to proceed,
Drag the slider all the way to the top,
OK,
give Admin permission to proceed.

Now everybody, including your Admin account, will have to give Admin permission to proceed to be able to change Windows settings.

Denis

 

Standard users can't install old style programs (shared by all users) without Administrator approval.

If you want to restrict them installing things from the Store as well afaik you'll need to uninstall the Store app as you can't disable it in Pro.

Source

To remove store for current user

Uninstall Apps in Windows 10 Apps Features Tutorials

 

ok guys thanks for this response.
I have already set up the slider to the top and still standard users are still able to install google chrome or mozilla firefox despite the admin privileges box pop up for password. even if they enter no password and click on yes, they are still able to install both browsers.

that's weird ....
Any other alternative solutions guys?

thanks

 

You'd need to block the exe not the installer if you want to restrict portable apps. Both Chrome and Firefox will install in %appdata% for current user only (actually they don't need to be installed even) so UAC will not help as they aren't writing to restricted area of system.

It would be hard to block them as user could rename the program and put it anywhere so blocking chrome.exe or .exe running from %appdata% wouldn't work if you are up against a determined foe *Wink

You could make it a child account perhaps Changes to Microsoft Family make it possible to block Chrome and Firefox in Windows 10 Anniversary Update

 

i thought it would be so simple to block. i am using chrome and firefox as examples but i would like to apply this to everyone who logged in using a standard account and want to install any kind of software.