Turn off the download feature in Windows 8 settings.
Turn off the download feature in Windows 8 settings.
He often uses streaming sites that trigger pop-ups, leading him to install unwanted add-ons or malware that hampers his PC performance. I was curious if there’s a method to prevent downloads in Windows 8 or specifically within Chrome, so he can avoid any unwanted software installations.
Open chrome://flags, scroll to the bottom, and turn on "Supervised Users".
Under Windows 10, you can restrict the entire operating system from any non-store executable starting from that moment, except for programs already installed. This means you can add all your preferred software, including Chrome. You can secure the OS via a straightforward setting in the Windows 10 Settings panel, ensuring Chrome, Notepad, Office, and other apps function normally as before, while anything else is blocked unless it comes from the Windows 10 Store. This setup offers strong defense against unwanted downloads, viruses, malware, ransomware, etc. However, you’ll need to purchase Windows 10 and upgrade your system.
Not exactly what I’m familiar with at this point. Still, limiting installation without admin rights can help. It won’t stop ransomware entirely, but it’s a viable backup option. No Group Policy required—just set up a regular user account (unless you already have an admin one, then adjust permissions accordingly).
Windows NT features a permission framework akin to POSIX file controls. To protect your system from unwanted changes or malicious activity, applications should operate under a standard user account. Anything attempting to alter system settings or another user’s files must obtain administrative rights—typically via a password. Even without triggering UAC prompts, the impact is usually confined to the user’s own folder, usually their Users directory. In practice, removing the account would resolve the issue. Chrome and Electron apps often install locally for the user, creating isolated instances that can be modified. The key lesson: untrusted users should run under a separate standard account to minimize potential harm. For extra security, you can restrict access so the user cannot reach restricted folders.