Prevent installation of new applications while permitting updates for current ones.
Prevent installation of new applications while permitting updates for current ones.
Seeking a method to block new software installations while permitting updates to existing programs. This approach doesn’t aim for strong security, just flexibility for less experienced users. It should let them download and install any desired applications, including updating without needing admin credentials.
You must handle two situations: programs that run in a regular user environment and those needing admin privileges. For users who install random applications, both aspects need attention. Windows offers Defender Application Control (replacing the previous AppLocker) and Application Control for Windows via Microsoft Learn. If you're dealing with third-party solutions, options like AirLock exist: Airlock Digital provides application whitelisting capabilities.