Disable Windows Installer to Block Software

This guide explains how to disable the Windows Installer service (MSIServer) to prevent new software from being installed on your PC. This is useful for locking down a shared computer, preventing unwanted programs, or troubleshooting installation issues. You’ll need administrator access to your Windows account. Follow the steps carefully, as disabling this service can affect existing software updates and uninstalls.

What You’ll Need

An administrator account on Windows (Windows 10 or 11)
Access to the Services console (services.msc)
Optional: A backup plan (e.g., a system restore point) in case you need to re-enable the service

Step-by-Step

Open the Services console. Press Win + R, type services.msc, and press Enter. This opens the Services window where you manage background services.
Locate the Windows Installer service. Scroll down the list and find the entry named Windows Installer. The service name is msiserver.
Open its properties. Right-click on Windows Installer and select Properties from the context menu.
Stop the service (if running). In the Properties window, if the service is currently running, click the Stop button. Wait for the status to change to Stopped.
Change the startup type to Disabled. In the Startup type drop-down menu, select Disabled. This prevents the service from starting automatically at boot or when triggered by an installer.
Apply the changes. Click Apply, then OK to save the changes and close the Properties window.
Verify the service is disabled. Back in the Services console, the Startup Type column should now show Disabled for Windows Installer. The service will not start until you manually change it back.

Common Mistakes

Not stopping the service before disabling: If you only change the startup type to Disabled while the service is still running, it will keep running until the next reboot. Always stop it first.
Disabling the wrong service: There are several services with similar names (e.g., Windows Modules Installer, Windows Update). Make sure you select exactly Windows Installer (msiserver).
Forgetting to re-enable for updates: If you later need to install or update software, you must re-enable the service. Otherwise, installation will fail with an error.
Using Group Policy instead of Services: On Windows Pro/Enterprise, you can also disable installation via Group Policy, but the Services method is simpler and works on all editions.

Tips

Create a restore point first: Before making system changes, create a system restore point so you can revert if something goes wrong.
Use a non-admin account for daily use: For a shared computer, it’s often better to create a standard user account without admin rights. This blocks most installations without disabling the service globally.
Re-enable temporarily for updates: If you need to install a specific program, set the startup type back to Manual (the default), install the software, then disable it again.
Check for pending installations: Some updates may be waiting. If you disable the service before they complete, they may fail and cause issues. Run Windows Update before disabling.

Troubleshooting

Installers still run after disabling: Some installers use alternative methods (e.g., MSIEXEC directly). To block those, you can also rename the msiexec.exe file in C:\Windows\System32 (requires admin). However, this can break system tools, so it’s not recommended. Instead, ensure the service is truly stopped and disabled, and test with a standard MSI file.

Cannot stop the service: If the service is stuck, try restarting the computer first, then stop it before any installer runs. You can also open an elevated Command Prompt and run net stop msiserver.

Existing software fails to uninstall: Disabling Windows Installer will also prevent uninstalls of programs that use MSI. If you need to uninstall something, re-enable the service temporarily.

Windows Update errors: Some Windows updates rely on the Windows Installer service. If you see update errors, re-enable the service, run updates, then disable again.

Service keeps starting automatically: Some programs or scheduled tasks may try to start the service. Check Task Scheduler for tasks that reference msiexec and disable them.

Frequently Asked Questions

Will disabling Windows Installer affect existing programs?

No, programs already installed will continue to work. However, you won’t be able to install updates for them, and some programs may fail to start if they try to repair themselves.

Can I still install software from the Microsoft Store?

Yes, Store apps use a different installation mechanism (AppX) and are not blocked by disabling the Windows Installer service.

How do I re-enable Windows Installer?

Open Services, find Windows Installer, right-click, select Properties, set Startup type to Manual (or Automatic), and click Start.

Is it safe to disable Windows Installer permanently?

It’s safe if you never need to install or uninstall MSI-based software. For most users, it’s better to use a standard account or UAC prompts instead.

Why does Windows Installer keep starting on its own?

Windows may start it for system maintenance or when you open certain control panel items. Check scheduled tasks and disable any that trigger msiexec.

Does this block all software installations?

No. Some installers use other methods (e.g., NSIS, Inno Setup) that don’t rely on the Windows Installer service. To block those, you’d need additional measures like software restriction policies.

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →