If someone elusive is constantly cluttering the hard drive with unnecessary and system-loading programs, it is not at all necessary to ambush it. By configuring Windows in a certain way, you can prevent the installation of programs as such.
Instructions
Step 1
Press the key combination Win + R. The Run dialog box will appear, in which type gpedit.msc and press the Enter key. The Local Group Policy Editor will open.
Step 2
On the left side of the window, open Computer Configuration> Windows Configuration> Security Settings> Software Restriction Policies. If you have not previously assigned these policies, click Action> Create Software Restriction Policy. In the right part of the window, right-click on the newly created "Assigned file types" parameter and select "Properties". Scroll down the Assigned File Types list for MSI and EXE formats. If any of them is missing, add it using the "Extension" input field and the "Add" button at the bottom of this window. For the changes to take effect, click the "Apply" button and then OK, or immediately the OK button if no changes have been made.
Step 3
In the left part of the window, select the item "Security levels", and in the right - right-click on the parameter "Forbidden" and in the menu that appears, click the "Default" button. In the new window, click on the "Yes" button. Now the system will block all applications (including EXE and MSI installers) from the Assigned file types list from launching. The next two paragraphs of the instructions describe the steps to block access to the Local Group Policy Editor.
Step 4
Activate the guest account. To do this, click the "Start"> "Control Panel" button. Then there are two options: if the control panel is displayed with icons, select "User Accounts"> "Manage Another Account", and if by categories, find the "User Accounts and Family Safety" group and click on "Add or Remove Accounts" ". A new window will appear in which click on the "Guest" icon, and the next - "Enable". You have activated the account under which the user will log into the system.
Step 5
Select an administrator profile, i.e. the account under which you log in. Click on "Create Password". In the window that appears, enter the password, confirm it and, if you wish, write a hint. Finally, click "Create Password". Thus, you have allowed unauthorized users to access the system only using the "Guest" account. Through it, they will not be able to open the local group policy editor, and, consequently, they will not be able to unblock the installation of programs.
