How to Block a User From Installing Software on Windows?

If you share your computer with family members, kids, employees, students, or other users, you may not want everyone installing apps and programs freely. Unwanted software can slow down your PC, create security risks, fill up storage space, and even expose your data to malware or viruses.

You can use advanced settings like Local Group Policy Editor, Microsoft Family Safety, and User Account Controls to lock things down even more.

This guide explains multiple ways to block a user from installing software on Windows.

How to Block a User From Installing Software on Windows?

To block a user from installing software on Windows 11 or Windows 10, change the account type from Administrator to Standard User through the Settings app. You can also use Local Group Policy Editor to disable Windows Installer and software installation permissions. 

These methods help prevent unauthorized apps from being installed on shared computers.

Let’s learn them one by one in detail!

Method 1: Change the User Account to a Standard User

Step 1: Open Windows Settings

The easiest and most beginner-friendly way to block software installation is by changing the account type.

Start by clicking the Start Menu at the bottom left corner of your screen. After that, click the Settings icon. It looks like a small gear.

Inside the Settings window, look for the section called Accounts and click it.

On the left side, you will see several options related to users and sign in settings. Choose Family & other users on Windows 11. On Windows 10, it may appear as Other users.

This section shows every account connected to your computer.

Step 2: Select the User Account You Want to Restrict

Find the account that you want to stop from installing software.

Click the account name once. Additional options will appear below it.

Choose Change account type.

A small window will open with a dropdown menu. If the account currently says Administrator, that user has full control over the PC, including the ability to install programs.

Click the dropdown menu and select Standard User.

Then click OK to save the changes.

Step 3: Test the Installation Restriction

Now sign out of your administrator account and log in using the restricted user account.

Try installing a new application. Windows will usually ask for an administrator password before allowing the installation to continue.

Since the restricted user does not have administrator privileges anymore, they cannot complete the installation without approval.

This is the safest and simplest method for most home users.

Method 2: Use Local Group Policy Editor to Block Software Installation

This method is more advanced and works best on Windows Pro, Enterprise, and Education editions.

Step 1: Open the Run Window

Press the Windows + R keys together on your keyboard.

A small Run dialog box will appear.

Type gpedit.msc into the box and click OK.

This opens the Local Group Policy Editor, which is a powerful Windows management tool.

If nothing opens, your version of Windows may not support Group Policy Editor.

Step 2: Navigate to Windows Installer Settings

Inside the Group Policy Editor window, follow this path carefully:

Computer Configuration > Administrative Templates > Windows Components > Windows Installer

You will see multiple policy options in the right pane.

Look for a setting called Turn off Windows Installer.

Double-click it to open the configuration window.

Step 3: Enable the Restriction

Select the option labeled Enabled.

Below that, you will see another setting called Disable Windows Installer.

Choose Always from the dropdown menu.

Click Apply, then click OK.

This setting prevents users from installing most Windows Installer-based software packages.

Step 4: Restart the Computer

Close the Group Policy Editor and restart your PC.

Once the computer starts again, software installation attempts using Windows Installer packages will be blocked.

This method is especially useful in offices, schools, and shared computers where you want stronger control over app installations.

Method 3: Block Apps Using Microsoft Family Safety

If you are trying to restrict children or younger family members, Microsoft Family Safety is a great option.

Step 1: Create a Microsoft Family Group

Open your browser and visit the Microsoft Family Safety website.

Sign in using your Microsoft account.

Create a family group and add the child or user account you want to manage.

Make sure the restricted user signs into Windows using the same Microsoft account connected to the family group.

Step 2: Access App and Game Restrictions

Inside the Family Safety dashboard, select the user profile you want to manage.

Look for the section called Content Filters.

You will find options for web filtering, app restrictions, and screen time settings.

Enable app restrictions to control which programs can be installed or launched.

Step 3: Approve or Block Apps

When the user tries to install certain applications, Windows may require approval from the family organizer account.

You can allow safe apps while blocking unknown or unwanted software.

This method works very well for parents who want more control without manually changing system settings every time.

Method 4: Use User Account Control Settings

Step 1: Search for User Account Control

Click the Start Menu and type UAC or User Account Control.

Select Change User Account Control settings from the search results.

A security slider window will open.

Step 2: Increase Security Notifications

Move the slider closer to the top.

The recommended level is usually enough for most users, but you can increase it further for tighter control.

Click OK after making changes.

Windows may ask for administrator approval.

Step 3: Understand How UAC Helps

User Account Control does not completely block installations, but it adds an extra security layer.

Whenever someone tries to install software or make system changes, Windows asks for administrator approval.

If the restricted user does not know the admin password, they cannot continue.

This method works best when combined with a standard user account.

Method 5: Block Software Installation Through the Registry Editor

This method is more technical, so follow the instructions carefully.

Step 1: Open Registry Editor

Press Windows + R to open the Run dialog box.

Type regedit and press Enter.

Click Yes if Windows asks for permission.

The Registry Editor will open.

Step 2: Navigate to the Installer Policies Key

Go to this location:

HKEY_LOCAL_MACHINE\Software\Classes\Msi.Package\DefaultIcon

You can copy and paste the path into the Registry Editor address bar.

Step 3: Modify the Registry Settings

You may also navigate to:

HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Installer

If the Installer key does not exist, create it manually.

Inside this section, create a new DWORD (32-bit) Value called DisableMSI.

Set its value to:

• 0 for enabled installations
• 1 for managed apps only
• 2 for blocking all installations
• Set the value to 2 to fully block installations.

Restart the computer afterward.

Method 6: Use Third-Party Software Restriction Tools

Some users prefer using dedicated software management tools instead of manual Windows settings.

Programs like application whitelisting tools allow administrators to decide exactly which apps users can run or install.

These tools are commonly used in businesses, schools, libraries, and training centers.

Examples include:

• AppLocker
• Software Restriction Policies
• Endpoint management software
• Parental control software

These solutions provide advanced control but may require more setup knowledge.

Understanding the Difference Between Administrator and Standard User

Many beginners get confused about user account types, so this section is important.

An Administrator account has complete control over the computer. It can:

• Install software
• Change system settings
• Add or remove accounts
• Access protected files
• Modify security settings

A Standard User account has limited access. It can:

• Use installed apps
• Browse the internet
• Create files
• Change personal settings

But it usually cannot install software without administrator approval.

If your goal is simply to stop users from installing programs, changing the account type is often enough.

Tips & Cautions

Always keep at least one administrator account active on your PC. Without it, you may lose access to important settings and software installations.

Avoid editing the Windows Registry unless you carefully follow instructions. Incorrect changes can affect system stability.

Create a restore point before making advanced system changes. This gives you a backup option if something goes wrong.

Use a strong administrator password and avoid sharing it with restricted users.

Combine multiple restriction methods for better security. For example, use a Standard User account together with User Account Control and Family Safety.

Remember that some portable apps can still run without installation. Additional software restriction policies may be required for full lockdown protection.

If this is a workplace or school computer, check your organization’s IT policies before changing system settings.

FAQs

Can I completely stop someone from installing software on Windows?

Yes. The best way is to change their account to a Standard User and use Group Policy or Family Safety restrictions for additional protection.

Does this work on Windows 11 and Windows 10?

Yes. Most methods in this guide work on both Windows 11 and Windows 10.

Can users bypass these restrictions?

If users know the administrator password, they may bypass restrictions. Using a strong password is very important.

What is the easiest method for beginners?

Changing the account type from Administrator to Standard User is the easiest and safest method.

Is Group Policy available on Windows Home?

No. The Local Group Policy Editor is usually only available in Pro, Enterprise, and Education editions of Windows.

Can I block only specific apps instead of all installations?

Yes. Tools like AppLocker and Microsoft Family Safety allow more detailed app control.

Will this affect Microsoft Store apps?

Some Microsoft Store apps may still install depending on your settings. You can also restrict Microsoft Store access separately if needed.