u/2aidt

Hi,

I’m configuring a public/library Windows 11 PC.
Users are standard users (not admins), but they can still install apps like Firefox without an admin password because Firefox installs inside the user profile/AppData.

I tried AppLocker with these rules:

- Allow %WINDIR%
- Allow %PROGRAMFILES%
- Allow Administrators *
- Deny:
- %OSDRIVE%\Users\Bezoeker\Downloads\*.exe
- %OSDRIVE%\Users\Bezoeker\Desktop\*.exe

But when I enabled enforcement, the Start Menu and Search bar stopped working on Windows 11.

Is there another stable solution to block users from installing software like Firefox without admin prompts on public PCs?

What do you use on library/public/shared Windows PCs?

Hi everyone,

I’m configuring a Windows 11 Pro public library PC/kiosk account.

Currently working:
- auto login
- Edge auto start on library homepage
- maximized Edge window
- locked wallpaper
- cleanup of Downloads/Desktop/Documents
- restricted visitor settings

But I still have two issues:

1. Microsoft Edge history, passwords, sessions, and cookies are not always fully deleted after logoff/login.

2. If a user pins apps to the Windows 11 taskbar, those pinned apps stay there after the next login. They are not being removed/reset correctly.

I tried:
- PowerShell cleanup scripts
- deleting Edge profile files
- deleting pinned taskbar folders
- Explorer restart
- registry policies

I have NOT tried Group Policy yet for taskbar pinning or Edge cleanup.

For people managing public/shared Windows 11 PCs:
- what methods are you using?
- Group Policy?
- AppLocker?
- Assigned Access/Kiosk Mode?
- mandatory profiles?
- other tools?

I’m looking for the most stable setup for:
- resetting Edge data
- removing pinned apps
- blocking app installs
- keeping screenshots/clipboard working
- avoiding broken Start menu or Explorer issues

Thanks.