Set it to Enabled and choose Always from the drop down box. If you really want to prevent any kind of software installation, go to the following policy:Ĭomputer Configuration – Administrative Templates – Windows Components – Windows Installer and click on Disable Windows Installer or Turn off Windows Installer. The standard account does not have permission to install software most of the time. Lastly, to prevent users from installing third-party programs to shutdown the computer, you can create a standard (non-administrative) user account in Windows. Microsoft has written up a knowledgebase article on exactly how to do it. There is a way to apply local group policies to all users except the Administrator account, but it requires quite a few steps. If you remove that option also, then you’ve basically locked yourself out.

What I normally do is leave the option for the Run command in the Start Menu so that I can get access to Group Policy later on. Note that everything in the User Configuration section will apply to all users, even the Administrator account, so be careful and make sure you leave an option for restoring access if needed. User Configuration – Administrative Templates – System and double-click on the Prevent access to the command prompt policy and set it to Enabled. To prevent this scenario, you can also configure Group Policy to only allow shutdown of the computer when someone is logged on.Ĭomputer Configuration – Windows Settings – Security Settings – Local Policies – Security Options and scroll down to Shutdown: Allow the system to be shutdown without having to log on and set it to Disabled.įinally, you need to prevent people from going to the command prompt and simply typing in shutdown! To do this, go to the following policy:

However, if the computer restarts for any particular reason, the login screen will appear and the computer can be shut down. Now the user won’t be able to log off and won’t be able to reach that screen. To prevent this, you need to find the Remove Logoff on start menu setting in the same section and change it to Enabled also (only under User Configuration). However, a user could still simply log off of Windows and then click the Power button from there, which remains even after enabling the setting above. You’ll notice in the description that this will remove the shutdown option from the Start Menu and Task Manager.

Now on the right pane, double-click on Remove and prevent access to the Shut Down, Restart, Sleep and Hibernate commands and set it to Enabled.

Cancel shutdown windows 10