Disable or restrict the use of Windows Installer via Group Policy

Type gpedit.msc in start search and hit Enter to open the Group Policy Editor.

Navigate to Computer Configurations > Administrative templates > Windows Components > Windows Installer. In RHS pane double-click on Disable windows installer. Configure the option as required.

1) He “Never” option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured.

2)The “For non-managed apps only” option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured.

3)The “Always” option indicates that Windows Installer is disabled.

This setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs.