Security Windows

How to Block Users from Installing Software on Your Windows Computer

Mark O'Neill 30-11-2015

Whether you have a company network, or simply a computer used by various household members, it can be really annoying — or a huge security risk — if anyone is allowed to install software The Quickest Way to Install Windows Software: The Command Prompt Installing apps on Windows takes up a lot of time. Install and update your apps through the command prompt with this method. Read More on the computer. All it takes is for one virus-ridden program to get onto a network-linked computer, and suddenly you will have multiple botnets Is Your PC A Zombie? And What's a Zombie Computer, Anyway? [MakeUseOf Explains] Have you ever wondered where all of the Internet spam comes from? You probably receive hundreds of spam-filtered junk emails every day. Does that mean there are hundreds and thousands of people out there, sitting... Read More chanting “Resistance is futile….prepare to be assimilated!” at anyone who tries to destroy it.


Another scenario where blocking software from being installed is essential is personal security. Imagine if somebody tried to install key-logging software Don't Fall Victim to Keyloggers: Use These Important Anti-Keylogger Tools In cases of online identity theft, keyloggers play one of the most important roles in the actual act of stealing. If you’ve ever had an online account stolen from you - whether it was for... Read More on your computer to see what you have been typing, or to capture your login details for various sites? Pre-blocking new software The Best PC Software for Your Windows Computer Want the best PC software for your Windows computer? Our massive list collects the best and safest programs for all needs. Read More from being installed will stop those attempts in their tracks.


Since the best treatment is prevention, we are going to take a look at some ways in which you can stop people from installing onlinesexystrippoker.exe. Trust me, you’ll thank me later.

Native Windows Solutions

The following methods look intimidating to anyone who dislikes fiddling around under the hood with their Windows setup. But quite honestly, it is really easy. Just follow along with me here. I won’t lead you astray.

Local Group Policy Editor

Go to your Start Menu and type in:


This brings up something called the Local Group Policy Editor. Now go to Computer Configurations > Administrative Templates > Windows Components > Windows Installer.


In the list in the right-hand window, scroll down until you find Turn off Windows Installer. The information window next to it will inform you that enabling this will “prevent users from installing software on their systems”. That’s the one we’re looking for.

When you double-click that option, another box will pop up, and you just have to choose Enabled, then press OK. All done. To reverse the process, just double-click the option again and choose “Disabled”.


Don’t Run Specified Windows Applications

Another way to block the Windows Installer from being used can be found in another area of the Local Group Policy Editor.

Go back to the main menu in the Policy Editor window, and now go to User Configuration > Administrative Templates > System. In the right-hand window which now appears with options, scroll down until you find Don’t Run Specified Windows Applications. As the title implies, this is used for blocking certain programs from being run, but we can also use it to block the Windows Installer.


Double-click that and another window appears. When you click Enabled, a new option appears called List of Disallowed Applications. Click Show and a third window appears where you type in the path of the program to be blocked.


Now note I said “path”. That means it is not sufficient to just say “Windows Installer”. You have to lay out the route to the location of the Windows Installer, so the Policy Editor can find it. The Windows Installer Program is called msiexec.exe and is located at:


Copy/paste that into the space provided in the box and click OK. The Windows Installer should now be blocked.

Restrict via the Registry Editor

Aaggh! The Registry! What Is the Windows Registry and How Do I Edit It? If you need to edit the Windows registry, making a few quick changes is easy. Let's learn how to work with the registry. Read More The one Windows word which is guaranteed to send shivers down peoples spines. Nobody likes going in here, as it’s got things going on that I can’t rightly explain. Things that go bump in the night, and all that.



But we need to embrace our fears, so hang on. We’ll get through this together.

The first step (after arming ourselves with crucifixes and garlic cloves) is to do the key combination Windows key + R. In the Run box, type:


This will bring up the Registry Editor. Calm down and stop screaming. It won’t bite you.

Now use your mouse to navigate to:



In the right-hand window which now appears, you’ll see the path to the Windows Installer, with a zero on the end. That zero implies that the Installer is allowed. To disable the Installer, just click on that line, and in the box that now pops up, change that 0 to a 1. Save and close. Installer blocked.

Well done. You survived the Registry!

Software Options

I know there are other Windows options, such as elevated privileges or using the Local Security Policy. But I decided I would focus on the 3 easiest options instead, and not overload you. But if you still don’t feel comfortable messing around with your Windows settings, then another option would be to install software that gets the job done for you. Maybe it’s just me, but I find it ironic that you need to install software to block software!

Here are three options which I tried – one free and two paid (with free trial periods) – and which lock your system down tighter than a baby’s bottom.

WinGuard Pro

Plan: Paid, 30 Days Free Trial

From what I can see, WinGuard Pro is more geared towards locking down areas of the computer to other users. So for example, if you are the system administrator at work, you may want to block access to the Registry Editor by other users in the network. Or blocking “Programs & Features” would stop people from getting into the list of installed apps and uninstalling anything.


To block something, you would bring it up on the screen, then click Lock Program. A list of open apps will then appear in a box and you would choose the one you want locked. Obviously “Unlock Program” reverses that.


Plan: Paid, Free Trial Period

This stops anything from being installed by looking out for certain keywords in apps running on your system. So if someone tries to install something, and a keyword is noticed, Install-Block automatically blocks it from going any further.


So as you can see in the screenshot, keywords can include “install”, “setup” or “license agreement”. What other words could we add? “Terms & Conditions”, maybe? “Freeware”?

InstallGuard (no longer available)

Plan: Free

InstallGuard does its job really well — to the point where I couldn’t figure out how to shut it down and uninstall it afterwards! I finally figured out that you have to sign into the app with the administrator password, then click File >Exit. That shuts it down and you can then uninstall it if you want.


If you are looking for somethingreally effective that works right out of the box, this is the one. For me, it blocked EVERYTHING from being installed — and I was logged in as the administrator! You can’t argue with the price, either.

Deep Freeze

One final intriguing option is one proposed by Joe back in January, i.e. “deep freezing” your computer System Restore On Reboot - Deep Freeze Your Windows Installation With Free Tools If you've ever wanted to maintain a system state to keep it secure and not allow any changes, then you might want to try deep freezing your Windows computer. Read More , which resets your system back to a previous state every time you reboot it. This way, any changes made to your computer will be wiped out when rebooted. So if someone dares to install something, it will be deleted when you switch the computer off.

How to Block Users from Installing Software on Your Windows Computer deep freeze

The only downside to this of course is that it will also wipe out your changes. So it is not perfect.

Which Option Do You Prefer?

Let’s not forget that a Standard User account cannot install software without providing an administrator password. Hence the above options are best used to restrict your administrator account from accidents.

Which option would you prefer to use? Have you ever had to deal with someone installing something on your system without your permission?

Related topics: Install Software, Windows 10, Windows 7, Windows 8, Windows 8.1.

Affiliate Disclosure: By buying the products we recommend, you help keep the site alive. Read more.

Whatsapp Pinterest

Leave a Reply

Your email address will not be published. Required fields are marked *

  1. John W Nelson
    January 17, 2020 at 2:42 pm

    Yeah, that registry example, all you've done there is tell it to use a different default icon, you didn't instruct Windows to do anything different with installs.

  2. WILL
    March 11, 2019 at 8:56 pm

    Would be nice to see an article that allows you to lock all installs on any computer, and also allows remote unlocking of install privileges!

  3. juan
    January 26, 2019 at 4:02 pm

    But how do I avoid the person installing new software by undoing but I just did? Can I protect this with a password or something?¿

  4. The Computer Nerd
    April 18, 2018 at 3:13 pm

    FYI, you can still install some software on Standard User accounts that don't need administrator privileges. Using the Software Restriction Policy in Group Policy. Though you can't access Group Policy on Home editions of Windows and requires Pro or Enterprise editions of Windows.

  5. lenny
    August 18, 2017 at 12:23 pm

    the 360 protection program mr lee so highly recommended corrupted my computer beyond any other. Thanks for nothing.

  6. Krizlay
    February 25, 2017 at 9:53 am

    InstallGuard is not free now..

  7. Fred
    September 2, 2016 at 2:58 pm

    I tried the regedit tip on a Windows 7 VM: then uninstalled and reinstalled vlc Media Player with no issue. So it does not work...

  8. Ramicoo
    July 11, 2016 at 10:22 am

    Great article mate, Thank you.

  9. HP
    April 1, 2016 at 5:07 am

    A very tasty coffee made by knowledgeable and witty author, really useful stuff

  10. Anonymous
    December 2, 2015 at 9:18 am

    Even When You Persist On Always Using An Administrator Account And IE8, MCAFEE Can Give You The Option To Warn You And/Or Block Programs From Being Run From The Temp And/Or The Downloads Folders.

    It Has Served Me All Too Well.