Applications - Restrict Users from Running Specific Applications

This setting allows you to specify applications and filenames that users are restricted from running.
Open your registry and find the key
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]
Create a new DWORD value and name it "DisallowRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.
Then create a new sub-key called
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer\DisallowRun]
and define the applications the are to be restricted. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be restricted (e.g. "regedit.exe").
Explained: DK

Right click in the right pane and select New, DWord value. Name the new value DisallowRun. Double click the new value and set it to 1. Then right click on the Explorer sub branch, in the left pane and select New, Key Name the new key Disallow Run. Highlight this key, then in the right pane, right click and select New, String value. Give it "1" for the name, without the quotes.

Double click this new value and enter the actual file name of the executable you wish to restrict this user from running. Example: calc.exe This prevents this user from running Calculator. They'll get a "This operation has been cancelled message" when they try. Note: The way around this is for the user to rename Calc.exe to something else. For additional entries, just give the "values" names in numerical order, 1, 2, 3, 4 and so on. DisallowRunReg and DisallowRunCalc

Restart Windows for the changes to take effect.

Comments