There are multiple ways to lock down Windows, and various schools use them. The problem with AppLocker is that it assumes you have a reasonably sophisticated IT

There are multiple ways to lock down Windows, and various schools use them. The problem with AppLocker is that it assumes you have a reasonably sophisticated IT department that knows what it wants and can write rules to achieve it. Windows 10S is much more flexible and requires no set-up and no maintenance. If it's in the Windows Store, you can install it. Bear in mind that schools run fleets of PCs and children do not have their own. They get whichever comes off the trolley. The Windows store installs whichever apps they use when they log on.