Policy
Turn off Windows Installer
Windows 11 25H2
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows10, Windows10RT, Windows11, Windows2000, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP
This policy setting restricts the use of Windows Installer. If you enable this policy setting, you can prevent users from installing software on their systems or permit users to install only those programs offered by a system administrator. You can use the options in the Disable Windows Installer box to establish an installation setting. -- The "Never" option indicates Windows Installer is fully enabled. Users can install and upgrade software. This is the default behavior for Windows Installer on Windows 2000 Professional, Windows XP Professional and Windows Vista when the policy is not configured. -- The "For non-managed applications only" option permits users to install only those programs that a system administrator assigns (offers on the desktop) or publishes (adds them to Add or Remove Programs). This is the default behavior of Windows Installer on Windows Server 2003 family when the policy is not configured. -- The "Always" option indicates that Windows Installer is disabled. This policy setting affects Windows Installer only. It does not prevent users from using other methods to install and upgrade programs.
Registry values
How enabled and disabled states update the registry.
No explicit registry values are set for enabled or disabled states.
Policy elements
Inputs and configuration options exposed by this policy.
| Element | Type | Registry mapping | Constraints & behavior |
|---|---|---|---|
Disable Windows Installer ID DisableMSI | enum | HKLM\Software\Policies\Microsoft\Windows\Installer\DisableMSI Type REG_DWORD | Options: Always (2), For non-managed applications only (1), Never (0) |
Other policies in this category
Explore related policies at the same level.
- ComputerAllow user control over installsAt least Windows 2000
- ComputerAllow users to browse for source while elevatedAt least Windows 2000
- ComputerAllow users to patch elevated productsAt least Windows 2000
- ComputerAllow users to use media source while elevatedAt least Windows 2000
- UserAlways install with elevated privilegesAt least Windows 2000
- ComputerAlways install with elevated privilegesAt least Windows 2000
- ComputerControl maximum size of baseline file cacheWindows Installer v3.0
- ComputerEnforce upgrade component rulesWindows Installer v3.0
- ComputerPrevent embedded UIWindows Installer v4.5
- ComputerPrevent Internet Explorer security prompt for Windows Installer scriptsAt least Windows 2000
- UserPrevent removable media source for any installationAt least Windows 2000
- ComputerPrevent users from using Windows Installer to install updates and upgradesAt least Windows 2000