Hi everyone.
My friend who become victim to a online pop-ups so he is now looking to lock down Windows 10 Pro laptop to stop installing software other than what he has already installed and preventing popups and the like when he is browsing. He share his laptop with his little brother who happen to installed unwanted software from the browser popups.
He could implement a local group policy to restrict in my opinion but from my own experience this isn’t fool proof. As I understand it, even when a policy has been put in place to block an install, a user can still install software if it only applies to their profile and not all users.
Any advice would be appreciated, its a shame he has to go to these lengths to protect his father but I guess old age catches up to us all.