Prevent installation of new computer software: Installing a new program on the computer does not require more than double-clicking on the installation file, then pressing the Next button a few times to reach the stage of completing the installation by pressing Finish. Even if the methods of installing programs differ on Windows, it is generally straightforward. As a result, you may sometimes want to disable the ability to install programs to prevent the addition of other programs on the device, which is helpful in some situations. For example, if you do not want your children to install unnecessary programs or games on their devices, or you are afraid your child may download a program by mistake when he uses your computer to play. Installing an unknown program can lead to malware infection, so in this topic, we are going through some practical ways that you can try to prevent the installation of new programs on Windows.
Standard User
If you share your device with others, let me tell you that this is the easiest and best method to prevent others from installing software. All you have to do is create a standard account, a regular account devoid of any powers that allow modifying Windows settings or installing new programs on the device. If someone tries to install a program through this account, they must enter the administrator account’s password or PIN code. (Administrator account) which no one knows but you.
A standard account can be created through the Settings application in Windows. Still, the fastest way is through the User Accounts window, which can be accessed by opening the Run tool by pressing the Win + R (s) keys together, then typing the command [netplwiz] and pressing Enter. After the window opens, click on the “Add” button, then select the “Sign in without a Microsoft account” option so that this account is local and not linked to a Microsoft account, then choose “Local account” and enter the details of this account such as name and password (optional) and then press Next to complete Doing so will create a new standard account on Windows.
To ensure that this account is Standard and not Administrator, select this account from the User Accounts window and click the “Properties” button. When a new window appears, go to the “Group Membership” section and make sure that the “Standard user” option is selected, then click OK. Now you can close the User Accounts window and create your first login to that account, hit the Start button in the taskbar, then click on your profile picture and select from the list the name of the new version — the first login takes a while.
After logging in to this account, if you try to install a new program on the computer, at some point, this program will need to obtain administrator permission to continue the installation process, as the UAC window appears [as shown in the attached image above]. Consent can only be obtained after writing The password or PIN of the administrator account. Otherwise, the “No” button can be pressed to refuse the installation process.
Only allow installing apps from the Store.
Windows 10, starting with version 1703, also known as Creators Update, has an option in the Settings app that can be enabled to allow software and apps to be downloaded from the Microsoft Store only. Harm your device. Although this window also includes a shortcut to the Settings app where the option can be modified and allowed to be installed from anywhere, there is a way to block the ability to alter the permanent choice.
This method relies on the Local Group Policy Editor tool included in the Windows system, which allows the Administrator Account to control Windows features, applications, and even services and settings. This tool is only available in the Pro and Enterprise version; however, the device can also be run in the Home version, but unofficially, as we explained in a previous article. Anyway, all you have to do is press Win + S, type “group policy” in the search field, and press Open.
After running the tool, go to the following path:
Computer Configuration\Administrative Templates\Windows Components\Windows Defender SmartScreen\Explorer
After clicking on “Explorer,” double-click on “Configure App Install Control” on the right side; then, in the window that appears, select the “Enabled” option, and in the section called “Options,” click on the “Pick on of the following settings” menu and select from it “Allow apps from Store only” to force Windows to prevent software from being installed except the Microsoft Store. When you’re done, click OK and close the Local Group Policy Editor window.
After applying the previous steps, restart your computer and then try installing new software on your device. You must download the installation file, whether in EXE or MSI format. After double-clicking on the file to start the installation, a window will appear, as shown in the image above. The program’s installation process has been blocked because you downloaded it outside the Microsoft Store. You only have two options, Get apps from the Store to open the Store. The second is, Change my app recommendation settings to modify the option responsible for blocking the installation.
If this option was activated directly from the Settings application, you could choose another option from the Choose Where to get apps menu. Thus the ban can be easily lifted by returning it to the default option that allows installing programs from anywhere. But since Local Group Policy Editor did the modification, any change to this option in the Settings app will also be prevented. The only way to undo this change is to follow the previous steps again and select Not Configured instead of Enabled.
Blocking the running of MSI installation files
This method, as is evident from the title, blocks the ability to run installation files in msi format that are used by most developers whose programs depend on the Windows Installer interface for installation on the Windows system, so this method will not prevent the installation of programs if the installation file is in excel format, it will work naturally. With this point in mind, you can implement this method by repeatedly opening the Group Policy Editor tool using Search or the Run window by pressing Win + R together and then typing [gpedit. msc] and press Enter. After opening the device, go to the following path:
Computer Configuration\Administrative Templates\Windows Components\Windows Installer
In the right pane, double-click the Turn off Windows Installer option, and a new window will appear; select the “Enabled” option, then choose Always from the Options menu and click OK.
Later, suppose you try to run the MSI file to install new software or a component driver on your computer. In that case, the message “The system administrator has set policies to prevent this installation” will appear, and you cannot proceed with the download. This, as noted, will not apply to EXE installation files. To undo this change, replace the Enabled option with Disabled within the Group Policy Editor tool.
Install-Block
If none of the previous methods work, you can try a third-party program to prevent software from being installed on your computer without your consent. Install-Block is considered one of the best programs in this regard, regardless of its name. The program is not originally designed to block the installation of programs. Instead, its function lies in searching for specific words in the titles of program windows. If it detects a comment such as Install, this window is automatically hidden and does not appear until after Writing down the password.
The program is simple to use. After running it, go to the Config window, select “Black List” from the side menu, press “Add,” and enter the words you want the program to search for in the window titles. The program already has a list of common words, but you can add other words to include as many possibilities as possible. In addition, you can use Install-Block to block access to your installed folders, programs, or even games.
That’s all here. Check also PC Manager tool to speed up computer Don’t forget to share the article and include a comment below.
