Step 01
Download
Click Download Windows Protection. You only need one file: Layers-Guard-Windows-Setup.bat.
// That's really it
Three simple steps
The installer handles the technical work for you.
Step 02
Double-click
Open the downloaded file. Windows will ask for administrator permission. Click Yes and enter the parent's administrator password if requested.
Step 03
Done
The installer downloads the verified Layers Guard protection scripts, applies the Chrome policies, checks that they worked, and saves a rollback backup automatically.
ℹ️
If Chrome is already open
Close and reopen Chrome once after setup so all Windows policies are picked up. That's the only follow-up step.
// Automatic protection
What the installer does for you
Windows Secure Mode automatically configures and verifies:
✓ Chrome Guest Mode disabled
✓ Chrome Incognito disabled
✓ New Chrome profiles disabled
✓ Extension Developer Mode disabled
✓ Layers Guard force-installed
✓ Rollback backup saved safely
Built to fail safely
The BAT file does not contain a second, simplified copy of the hardening logic. It downloads the already-audited PowerShell toolkit from a version-pinned public repository, verifies each downloaded file against its expected Git blob hash, and only then runs it. If verification fails, setup stops.
One important parent rule
The child's Windows account should be a Standard User, not an Administrator. Keep the administrator password with the parent. Windows Secure Mode strengthens Google Chrome; it does not control Firefox, Brave, Edge, native apps, other devices, or an Administrator user.
// Easy rollback
Want to remove Windows Secure Mode?
The installer keeps the original policy backup in a protected Windows location so rollback is simple too.
Download → Double-click → Removed
Use the removal file below. It restores only the policy values Layers Guard owns and preserves later administrator changes when there is a conflict.
Download Remove Windows Secure ModeTechnical users: manual setup documentation · security checklist