Run limit files

If you really want to prevent the program from being run I would log in as administrator and Take Ownership of the file. On access settings I would allow not even read access by anyone else.

Edit: also local policy isn't the greatest way to prevent a program being run. I used it to prevent IE from being run. But Windows Installer trumps my regular account so during install of a program up popped IE to my surprise.

I'm not sure that it's possible to specify anything other than file names. Another way is to use some sort of application whitelisting that will automatically block untrusted/ unsigned files or else can be configured to prompt the user for action.

i installed Take_Ownership but But it's not applicable to all executable files

What account are you running it from?

s00 said:

Where to Run application whitelisting?????????

It requires installation of software. You can get it here: https://secureaplus.secureage.com/Main/release.php

Choose NO Antivirus version.



It will take some time to build a database of files that already exist on your machine. When it's finished - any new digitally unsigned files will be untrusted by default. You will be prompted for action if an unsigned file attempts to run. To define a trust level for any existing file - right click on the file on choose a trust level.



So go back to your test file and set it to Not Trusted. Then when that file or any unsigned executable files that are created in future attempt to run you will see a window like this:



Then it's down to you if you let something dodgy launch!

To get an idea on how to use Application Whitelisting look here:

https://secureaplus.secureage.com/Main/faq.php

Scroll down to the Application Whitelisting FAQ's section.

s00 said:

There are two problems:
1.if selecting yes File runs
2.i want Users not understand the File restricted

Set default action to blocked.