How to Prevent Users From Installing programs when browsing the Web Page

To control installation programs on the internet, you must configure the regional settings of IE browser. You can adjust the Internet Options in the tool menu. At the same time, you modified the Windows registry. However, to automatically change the registry for a specific user or a large number of users, using a group policy to change the registry is more effective. You can write a script to modify the registry or directly edit the registry. Note that if you do not have the required knowledge, careful testing may damage the operating system. When you do this, do not forget to add settings to prevent users from accessing the Internet option area and changing properties. Prevent users from becoming administrators on their own machines. Once they can become administrators, they can directly edit the registry, and your work will not work.

There is no automatic way to provide all the functions you want, so please read the article describing security registry settings in IE. In this article, you will find what needs to be changed. The region indicates that the Internet region is set to 3) and the specific value to be added or edited. For example, set "1803 Control File Download" to "3" to "disabled", "0" to "enabled", and "1800" to "installed desktop project.

The group policy management template setting can be used to restrict the Internet access options for users. However, you must restrict Internet access options through the Windows component Internet browser menu, and then select the tool menu: disabling the Internet option setting does not prevent users from making changes through the control panel. You must also configure Internet Control Panel settings for IE browser on the management template to disable access to all option pages.