How to block a program from being installed

As an admin, you can prevent users from installing mobile apps that aren't managed. An app is managed when you add it to the Web and mobile apps list.

Note: These settings don't remove or block apps already installed on devices. To prevent app access to Google services, you can use app access control:

  1. For individual apps of concern, you can block or limit access.
  2. For Google services that you want to hide from any app you don't explicitly trust (by adding to your Web and mobile app list), you can set the service as restricted.

Block unmanaged Android app installation

Supported editions for this feature: Frontline; Business Plus; Enterprise; Education Fundamentals, Education Standard, Teaching and Learning Upgrade, and Education Plus; G Suite Basic and G Suite Business; Cloud Identity Premium.  Compare your edition

Requires advanced mobile management

  1. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.

  2. Click Apps and data sharing
    How to block a program from being installed
    Available apps.
  3. Select Only allowed apps.
  4. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Changes can take up to 24 hours but typically happen more quickly. Learn more

Block unmanaged iOS app installation

Supported editions for this feature: Enterprise; Education Standard and Education Plus; Cloud Identity Premium. Compare your edition

Supervised company-owned iPhones and iPads only

  1. Click Apps and servicesApp installation.
  2. To apply the setting to everyone, leave the top organizational unit selected. Otherwise, select a child organizational unit.

  3. Uncheck the Allow users to install apps box. When unchecked, users can't access the App Store and apps bought on other devices can't download automatically. Users can still download allowed apps through the Google Device Policy app.
  4. Click Save. If you configured a child organizational unit, you might be able to Inherit or Override a parent organizational unit's settings.

Changes can take up to 24 hours but typically happen more quickly. Learn more

  • Manage mobile apps for your organization
  • Control which third-party & internal apps access Google Workspace data


Google, Google Workspace, and related marks and logos are trademarks of Google LLC. All other company and product names are trademarks of the companies with which they are associated.

Was this helpful?

How can we improve it?

In some cases, you might want to prevent users from installing the software in Windows 10, such as when you manage company computers or if you don't want your children playing around your computer. There are some third-party tools on the web that can help block software installation, and the following two methods also can help.

Method 1: Prevent software installation using the standard account

As we all know, administrator permissions are required to install software programs in Windows 10, so the quick way to prevent others from installing software on your computer is by using standard accounts. You can set a password for the administrator account and don't share the password with others, and create a standard user account without a password. In this way, other people wanting to use your computer will log on using the standard user account and they won't be able to install software without the administrator password.

If using standard account is not the method you want, move on to another method.

Method 2: Prevent software installation with Group Policy Editor

Windows calls Windows Installer to install software, so if you turn off the Windows Installer policy, software installation will be blocked.

Step 1: Make sure you are logged in Windows 10 using an administrator.

Step 2: Open the Local Group Policy Editor. You can type gpedit.msc in the Start menu search box and hit Enter key to open it.

Step 3: Navigate to Computer Configuration > Administrative Templates > Windows Components > Windows Installer. In the right-side pane, look for the policy setting named "Turn off Windows Installer" and double click on it to edit this policy.

How to block a program from being installed

Step 4: Select Enabled, and select an option from the drop-down menu under "Disable Windows Installer", and then click on Apply followed by OK. This policy setting is not configured by default, and if you enabled it, you can prevent users from installing software on your Windows 10.

The "For non-managed applications only" option means users can only install programs assigned to the desktop by the administrator. The "Always" option disables Windows Installer altogether, while "Never" means it is enabled for all users and all users can install and upgrade software.

Notes: This policy setting affects Windows Installer only. Not all software programs need Windows Installer for the installation. Some use their own installer. Therefore, this method doesn't prevent users from using other methods to install and upgrade programs.

How to block a program from being installed

Step 5: You might need to restart Windows 10 for the changes to take effect. When you install a software program (e.g. VMware Workstation Pro), the installation will be blocked and you will get the error message that says: "The system administrator has set policies to prevent this installation."

How to block a program from being installed

Related Articles