Policy
Allow user control over installs
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows2000, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP
This policy setting permits users to change installation options that typically are available only to system administrators. If you enable this policy setting, some of the security features of Windows Installer are bypassed. It permits installations to complete that otherwise would be halted due to a security violation. If you disable or do not configure this policy setting, the security features of Windows Installer prevent users from changing installation options typically reserved for system administrators, such as specifying the directory to which files are installed. If Windows Installer detects that an installation package has permitted the user to change a protected option, it stops the installation and displays a message. These security features operate only when the installation program is running in a privileged security context in which it has access to directories denied to the user. This policy setting is designed for less restrictive environments. It can be used to circumvent errors in an installation program that prevents software from being installed.
Registry values
How enabled and disabled states update the registry.
| Registry location | Type | Enabled value | Disabled value |
|---|---|---|---|
| HKLM\Software\Policies\Microsoft\Windows\Installer\EnableUserControl | REG_DWORD | 1 | 0 |
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.
Other policies in this category
Explore related policies at the same level.
- ComputerAllow users to browse for source while elevatedAt least Windows 2000
- ComputerAllow users to patch elevated productsAt least Windows 2000
- ComputerAllow users to use media source while elevatedAt least Windows 2000
- UserAlways install with elevated privilegesAt least Windows 2000
- ComputerAlways install with elevated privilegesAt least Windows 2000
- ComputerControl maximum size of baseline file cacheWindows Installer v3.0
- ComputerEnforce upgrade component rulesWindows Installer v3.0
- ComputerPrevent embedded UIWindows Installer v4.5
- ComputerPrevent Internet Explorer security prompt for Windows Installer scriptsAt least Windows 2000
- UserPrevent removable media source for any installationAt least Windows 2000
- ComputerPrevent users from using Windows Installer to install updates and upgradesAt least Windows 2000
- ComputerProhibit flyweight patchingWindows Installer v3.0