Prohibit non-administrators from applying vendor signed updates

This policy setting controls the ability of non-administrators to install updates that have been digitally signed by the application vendor. Non-administrator updates provide a mechanism for the author of an application to create digitally signed updates that can be applied by non-privileged users. If you enable this policy setting, only administrators or users with administrative privileges can apply updates to Windows Installer based applications. If you disable or do not configure this policy setting, users without administrative privileges can install non-administrator updates.

Policy Details

Policy Name

MSI_DisableLUAPatching

Registry Key

Software\Policies\Microsoft\Windows\Installer

Value Name

DisableLUAPatching

Supported On

Windows Installer v3.0

OMA-URI (CSP)

ADMX_MSI/MSI_DisableLUAPatching

OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202

CSP Version:10.0

Conflict Resolution:LastWrite

Allowed Editions:

EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval

Policy State Values

Enabled: 1

Disabled: 0

Available Languages

en-us