If you help support your business and / or home computer, and you want to keep things secure and tidy by stopping other users from downloading unwanted software from sources you don’t trust onto the computer, here’s how…
To lock down Windows 10 so users can’t install new software unless it comes from a trusted source:
Go to Settings > Apps > Apps & Features.
Look for the Installing Apps setting at the top of the page. There should be three choices:
1-Allow apps from anywhere (the default).
2-Warn me before installing apps from outside the Windows Store. Selecting this option will mean that any standard user accounts will need your permission to continue.
3-Allow apps from the Store only. Select this option if you don’t want users to be able to install apps from anywhere except the trusted Windows Store.
Desktop programs that you’ve already installed before enabling this restriction will continue to run.
Using these restrictions, you can set up a PC with a selection of trusted apps and then lock it down so nothing changes without your permission.