What's the best way to lock down Windows 10 from installing anything?

[Kelemvor]

Howdy,

I have a laptop that my kids use for "homework". Well, that's what they're supposed to use it for. I have Microsoft Family Security whatever setup on it so they can't do some things but there doesn't seem to be any built in way to prevent them fro using the stupid Windows Store, from downloading and installing software, etc.

It's running Windows 10 Pro which means Microsoft removed the easy ability to block the Store from what I've found so far online.

Is there a surefire way to lock something down so the only thing they can do is use their math software that I install for them? I want to completely block the Windows Store so they can't view, browse, install, etc. I'd love to block the entire internet (which I can sort of do through the Family thing). Even if they click something by mistake and it wants to install something, I don't want them to be able to do that.

Any tutorials, links, software recommendations, or anything else would be appreciated.

Thanks.

 

[deustroop]

You'll need the Windows 10 Enterprise or Education editions to configure a policy that prevents access to Windows Store. But there is a power shell command that uninstalls the Store.

https://www.theregister.co.uk/2016/05/05/microsoft_windows_10_pro_store/

"So, it appears that if admins want to keep users from accessing the Windows Store with Win10 Pro PCs, they'll have to either spring for the upgrade, or crack open PowerShell and run Get-AppxPackage *windowsstore* | Remove-AppxPackage to uninstall the software bazaar – in which case, we hope you know what you're doing. Remove-AppxPackage also works on other bundled apps, although not Edge, by the way. ®"

The other approach is one of social engineering.Can you teach the little devils proper behaviour on the internet ? Carrot and stick works.

 

[dclive]

Howdy,

I have a laptop that my kids use for "homework". Well, that's what they're supposed to use it for. I have Microsoft Family Security whatever setup on it so they can't do some things but there doesn't seem to be any built in way to prevent them fro using the stupid Windows Store, from downloading and installing software, etc.

It's running Windows 10 Pro which means Microsoft removed the easy ability to block the Store from what I've found so far online.

Is there a surefire way to lock something down so the only thing they can do is use their math software that I install for them? I want to completely block the Windows Store so they can't view, browse, install, etc. I'd love to block the entire internet (which I can sort of do through the Family thing). Even if they click something by mistake and it wants to install something, I don't want them to be able to do that.

Any tutorials, links, software recommendations, or anything else would be appreciated.

Thanks.

Here are a few ideas:

1. Ensure they log in as non-admins. This is obvious but it sounds like you haven't done it. Everyone should have their own account, or the default account should be non-admin and to install things you should then switch to (only) your admin account.
2. Ensure MS Family Safety blocks everything. Everything. Explicitly add the websites they are permitted to go to. Change the "Allow Apps & Games Rated For:" to the lowest, youngest setting, and select the 'block inappropriate' setting, of course.
3. Goes without saying that all non-Edge browsers aren't permitted. But I said it anyway.
4. Set up screen time. If they want more time, they can ask you.
5. Invest in the Unifi (Ubiquiti.com) https://www.ubnt.com/unifi/unifi-ap/ stuff. Not just the access point - get the access point, the router, and the gateway. And yes, even with "AT&T forces me to use their integrated modem/router/switch!" it can all be put into place. Set it up to block any websites you don't like, and set it up so you can see what categories of content they're going to online. Set up timed access so after XXYY hour of day, wifi goes off completely.
6. Set up OpenDNS and block all items (adult content, say) you don't want.

You can easily make it so the only things they can do on the machine are math software. The above list will get you started.

 

[Elixer]

Could also install Windows 10 S on that.

There are also ways to "uninstall" win 10 store and almost everything else using dism or Remove-AppxProvisionedPackage.

 

[Kaido]

Any tutorials, links, software recommendations, or anything else would be appreciated.

If you're not adverse to spending money to solve the problem, I've had good luck with SureLock Kiosk: ($50 per PC)

https://www.42gears.com/products/surelock/surelock-windows-tablet-kiosk/

You can limit what applications can be run and allow only specific websites, among other things.

 

[dclive]

Looks like OP wrote the question then never came back.

 

[bruceb]

Why not just set up a Proxy Server where you can configure an Access Control List of sites that are allowed ? You can then block the computer from going to any website that is not on the list. Lock down the settings in the web browser so the proxy can not be disabled.