System hacks: Block software installation via mobile devices

Computers with Windows 10 operating system that are set to block the installation of software from unknown sources via external devices are good for keeping the system safe. Blocking the installation of software via mobile devices can be achieved by modifying Group Policy or editing the registry.

For users using Windows 10 Professional, Enterprise or Education editions, it is very easy to perform the blocking by modifying Group Policy as these editions directly support Group Policy editing.

Right-click the Start button and select the Run item to open the Run dialog box. Enter the GPEDIT.MSC command and then OK it to start the Local Group Policy Editor (Figure 1).

1819A-NOINST-1

In the Local Group Policy Editor, expand to “User Configuration → Administrative Templates → Windows Components → Windows Installer”, and then find the “Block any installation from removable media” option in the right pane (Figure 2).

1819A-NOINST-2

Double-click the item to enter the settings window, check the “Enabled” option, and finally click “Apply” and OK to exit the Group Policy Editor (Figure 3).

1819A-NOINST-3

After setting up as above, you will not be able to install software using flash drives, CDs and other removable media.

Although it is easy to implement with the above method, users who are using the Home Edition of Windows 10 are not so lucky. Since the Home Edition of Windows disables the Group Policy editing feature, so you can only find another way to solve the problem. And modify the Registry Editor is a more convenient choice.

First, type REGEDIT in the Cortana search box to start the Registry Editor. In the Registry Editor, locate the “HKEY_CURRENT_USERSoftwarePoliciesMicrosoftWindowsInstaller” branch in order. If the Installer branch does not exist, you can create a new one by right-click menu command (Figure 4).

1819A-NOINST-4

Then, under Installer, create a new DWORD (32-bit) value named DisableMedia, double-click the value and change its numeric data to 1 (Figure 5). In this way, exit the Registry Editor and reboot the system will not be able to install software via mobile devices.

1819A-NOINST-5

Tip: To restore the function of installing software on mobile devices, you can change the above numerical data to 0, or simply delete the Installer item as well.

Leave a Comment