Two ways to prevent a specific user from running a program

Sometimes you need to share your computer with other users, but don't want them to run certain applications. This article will introduce two ways to prevent users from running specific programs in Windows 10 systems: using the local Group Policy Editor and the Registry Editor.

Method 1: Use the local group policy editor

The Local Group Policy Editor is a Microsoft Management Console (MMC) snap-in that allows administrators to edit local Group Policy Objects (GPOs) and disable computer or user settings.

The steps are as follows:

1. Press Windows R to open the run window.
2. Enter gpedit.msc and press Enter .
3. Navigate to the following path: User Configuration\Administrative Templates\System .
4. In the right panel, locate and double-click the "Do not run the specified Windows application" option.
5. In a new window, select the "Enabled" option. Then click the Show button to display and add blocked programs.

6. In the pop-up window, add the executable file name of the program you want to block, and then click OK . For example, enter notepad.exe here.

7. In the Do not run the specified Windows application window, click Apply , and then click OK to make the changes take effect.

To allow users to run banned programs, you can adjust the Enabled button to Not Configured or Disabled .

Method 2: Use the Registry Editor

In addition to the local Group Policy Editor, you can also use the Registry Editor to prevent users from running specific programs.

The steps are as follows:

1. Press Windows R to open the run window.
2. Enter regedit and press Enter . When the User Account Control (UAC) window appears, select the Yes button.
3. Navigate to the following location:

Computer\HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

4. In the right panel, right-click any blank area and select New > DWORD (32-bit) Value . Name this value DisallowRun .
5. Double-click the newly created DWORD value DisallowRun and set its value data to 1 .

6. Right-click Explorer and select New > Key . Name the new key DisallowRun .
7. Right-click the new key DisallowRun and select New > String Value . Name the value 1 .
8. Double-click the value 1 . Then in the Value Dataframe, enter the target executable file name of the prohibited program and click OK .

If you want to prevent users from running multiple programs, just right-click the DisallowRun key and create multiple string values, name them 1, 2, 3, etc. in numerical order, and then follow the above steps to fill in the corresponding exe file name for each string value.

Choose your preferred method to complete this task.

Software recommendations

Sometimes your application may be lost for some reason. For example, the application is lost after a Windows 10 upgrade. To recover lost or uninstalled programs, you can try MiniTool Power Data Recovery. MiniTool Power Data Recovery not only restores programs, but also restores Word recent documents that are not displayed, restores downloaded files, restores images, videos, audio, and more.

Summarize

This article describes how to use the local Group Policy Editor and Registry Editor to prevent users from running specific programs in Windows 10. If you have any questions about this topic, feel free to leave a comment below.

The above is the detailed content of 2 Ways to Prevent Users From Running Certain Programs. For more information, please follow other related articles on the PHP Chinese website!