Restrict All Application Installations for Non-Admin Users

Here are the Steps to Restrict All Application Installations for Non-Admin Users

- Open gpedit on the search bar

​

Go to Computer Configuration > Administrative Templates > Windows Components > Windows Installer

​

Make the following policies Enable. As in the picture.

Update the policies after this

Start CMD

​

Now we open gpedit again

Go to Computer Configuration > Windows Settings > Security Settings > Software Restriction Policies

-Right-click Software Restriction Policies and choose New Software Restriction Policies if it hasn’t been set up yet

-Under Additional Rules, create Path Rules for directories where installation files commonly reside (e.g., C:\Users\%username%\Downloads, C:\Users\%username%\AppData\Local\Temp) and set them to Disallowed. This will block installation files from running from these locations.

​

NOTE: These policies should be made separately for each user

Update the policies after this

Start CMD

Now I log into the user session and try to install a new program or software

-When I try, for example, I downloaded the Opera browser and tried to install it, I received the following message (I am sending you the attached image)

​

The policies have successfully blocked the user from installing new applications.