3 Ways to Prevent Users From Installing New Software on Windows 11

Pankil is a Civil Engineer turned freelance writer. Since his arrival at Guiding Tech in 2021, he delves into the world of how-tos, and troubleshooting guides for Android, iOS, and Windows. Besides his new-found love for mechanical keyboards, he’s a disciplined footfall fan and loves international travel with his wife.

Supreeth is passionate about technology and dedicates himself to helping people figure it out. An engineer by education, his understanding of the inner workings of all types of gadgets and devices ensures he provides top-notch guidance, tips, and recommendations to his readers. When away from the desk, you will find him traveling, playing FIFA, or hunting for a good movie.

Method 1: Turn Off Windows Installer via Group Policy

The Group Policy Editor on Windows lets you make various administrative-level changes. Among several options, there is a dedicated policy to disable Windows Installer, which effectively prevents users from installing new programs and apps.

It’s important to note thatGroup Policy Editoris only available on Windows Pro, Enterprise, and Education editions. So, if you’re using the Windows 11 Home edition, this method won’t work.

Step 1:Press theWindows key + Rto launch the Run dialog box; typegpedit.mscand pressEnter.

Step 2:In the Local Group Policy Editor window, use the left pane to navigate to the following folder:

Step 3:Double-click theTurn off Windows installerpolicy on your right.

Step 4:SelectEnabledand chooseFor non-managed applications onlyorAlways.

Note: If you choose the former, the standard user account can install anything an admin has installed on the PC.

Step 5:Click the Apply button to save the changes. At this point, it is best to restart the PC.

Method 2: Turn off Windows Installer via Registry Editor

Like Group Policy, Registry changes can be done to disable or turn off the Windows Installer. However, be sure to back up registry files or create a restore point before you make changes.

Step 1:Click thesearch iconon the Taskbar or press theWindows key + Sto open the search menu. Typeregistry editorin the box and selectRun as administrator.

Step 2:ClickYeswhen the User Account Control (UAC) prompt appears.

Step 3:Paste the following path in the address bar at the top and pressEnterto navigate to the DefaultIcon key.

Step 4:Double-click on theDefault string valueon your right.

Step 5:Paste the following value in the Value data box and hitOK.

After completing the above steps, restart your PC for changes to take effect.

Similarly, if you want to unblock program installation at any point, follow the same steps above and enter the following value in Step 5.

Method 3: Preventing Standard Users from Running Per-User Applications With AppLocker

AppLocker is a feature in Windows that allows admins to block apps they don’t want the users to install. This can be done by selecting from the list of preinstalled apps or using certificates.

When configuring AppLocker, you can configure the following:

Step 1:Open the Run prompt (Win + R), typesecpol.msc, and pressEnterto open the Local Security Policy.

Step 2:Navigate toSecurity Settings > Application Control Policies > App Locker. You can configure Executable Rules, Windows Installer Rules, and Packaged app Rules here.

Step 3:Right-click on the category that fits and selectCreate New Rule.

Step 4:Follow the wizard, and you can choose which app a user can install, which can be denied, and so on. You must go through each of them carefully and choose what to pick.

Tip: You can read more about AppLocker on theofficial Microsoft page.

FAQs

What Is An Example of an AppLocker Rule?

You can allow members of the local administrator’s group to run all apps but restrict the Everyone group to run apps from the Windows Folder or Program Files folder.

Can Applocker Be Applied to a Group of Users?

Yes, you can do that. It is best to add all non-admin accounts to a group and then apply the rules, as there is no Standard user group.

Was this helpful?

Last updated on 29 April, 2024

Leave a ReplyCancel reply

Your email address will not be published.Required fields are marked*

Name*

Email*

Comment*

Δ

The article above may contain affiliate links which help support Guiding Tech. The content remains unbiased and authentic and will never affect our editorial integrity.

More in Windows

5 Ways to Fix Dual Boot Option Not Showing on Windows 11

5 Fixes for Roblox Installer Not Working on Windows

JOIN THE NEWSLETTER

Get Guiding Tech articles delivered to your inbox.

© 2024 Guiding Tech Media. All Rights Reserved.