How to turn off Windows Installer to block MSI package

Is there a way to prevent users from installing the .msi package? Windows Installer is a background service, which manages the installation and uninstallation of MSI-based programs. To block the MSI installer, you can turn off Windows Installer using Group Policy or edit the registry.

Method 1: Disable Windows Installer with GPO

To disable Windows Installer using Group Policy, follow these steps:

1. Open Local Group Policy Editor and expand Computer Configuration> Administrative Templates> Windows Components> Windows Installer . Double click on the policy named Turn off Windows Installer in the right panel.

Double click on the policy called Turn off Windows Installer

2. Select Enabled. Click the Disable Windows Installer drop-down list and select Always.

Click the Disable Windows Installer drop-down list and select Always

3. Click OK and reboot the system to apply the changes. The next time you try to run any .msi package, you will receive an error message: 'The system administrator has set policies to prevent this installation'. (System administrators have set policies to prevent this setting.)

The next time you try to run any .msi package, you will receive an error message

Method 2: Disable the Windows Installer by tweaking the Registry

To disable the Windows Installer by tweaking the Registry, follow these steps:

1. Open Registry Editor and browse to: 

HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindowsInstaller

If the Installer subkey does not exist, you must create it first.

2. Double-click DWORD 32-bit DisableMSI on the right and set the value to 2 .

Double-click DWORD 32-bit DisableMSI on the right and set the value to 2

3. Close Registry Editor and restart Windows for the changes to take effect. If you need to re-enable the Windows installer, just set the value of DisableMSI to 0 .