Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Applications - Prevent Running Specified Programs



Applications - Prevent Running Specified Programs

How to Prevent Users from Running Specified Programs in Windows
Published by Brink
25 Apr 2010
Published by

How to Prevent Users from Running Specified Programs in Windows

information   Information
This tutorial will show you how to prevent all or specific users on the computer from being able to run a list of disallowed program EXE files you specify in Vista, Windows 7, or Windows 8.

You must be logged in as an administrator to be able to do the steps in this tutorial.

warning   Warning
This will not prevent users from being able to run a program through the command prompt unless you also add cmd.exe to the list of disallowed applications.

Even if you have an .exe file of a program in the list of allowed applications and also in the list of disallowed applications, then users will not be able to run the .exe. Anything disallowed will always override anything allowed.

Renaming an .exe file will bypass the list of disallowed programs to let it run anyways, but not with the list of allowed programs. If the .exe file name is not on the list of allowed programs, then it can't run.

This does not apply to "Metro" Store apps in Windows 8.


EXAMPLE: Message
NOTE: This is a message that all users will get when they try to run a EXE file on the list of disallowed programs that you specified.
Name:  Message.jpg
Views: 9123
Size:  43.7 KB



OPTION ONE
Through the Local Group Policy Editor
1. Open the all users, specific users or groups, or all users except administrators Local Group Policy Editor for how you want this policy applied.

2. In the left pane, click/tap on to expand User Configuration, Administrative Templates, and System. (see screenshot below)
Applications - Prevent Running Specified Programs-gpedit-1.jpg
3. In the right pane of System, double click/tap on Don't run specified Windows applications to edit it. (see screenshot above)

4. To Allow All Applications to Run
A) Select (dot) either Not Configured or Disabled, and go to step 6 below. (see screenshot below)
NOTE: Not configured is the default setting.
Name:  GPEDIT-2.jpg
Views: 9163
Size:  218.7 KB
5. To Prevent Specified Applications from Running
A) Select (dot) Enabled, then click/tap on the Show button under Options. (see screenshot above)

B) Under Value, double click/tap in a blank line and type in the name of the EXE file (ex: cmd.exe) with file extension that you want to prevent from running. (see screenshots below)

Tip   Tip
  • To change or remove a listed exe file name, you can just type over it.
  • To clear or reset the list of disallowed applications, you can select Not Configured (step 4), click/tap on Apply, select Enabled again, and click/tap on Apply.
Name:  GPEDIT-3A.jpg
Views: 8996
Size:  50.3 KB

Name:  GPEDIT-3B.jpg
Views: 8962
Size:  48.6 KB

C) Repeat step 5B until you have added any other EXE files (ex: CCleaner) you want on the list of disallowed applications as well. When finished, click/tap on OK. (see screenshots above)

D) Go to step 6 below.
6. Click/tap on OK. (see screenshot below step 4A)

7. If used, you may also wish to make changes to your list of allowed programs to run.

8. Close the Local Group Policy Editor window.





OPTION TWO
Manually in Registry Editor

NOTE: This option affects all users on the computer.
1. Press the Windows + R keys to open the Run dialog, type regedit, and click/tap on OK.

2. If prompted by UAC, click/tap on Yes (Windows 7/8) or Continue (Vista).

3. In regedit, navigate to the location below. (see screenshot below)
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Applications - Prevent Running Specified Programs-reg1.jpg
4. To Prevent Specified Applications from Running
A) In the right pane of Explorer, right click or press and hold on a empty space, and click/tap on New and DWORD (32-bit) Value. (see screenshot below)
Applications - Prevent Running Specified Programs-enable-1.jpg
B) Type in DisallowRun and press Enter. Double click/tap on DisallowRun to modify it. (see screenshot below)
Applications - Prevent Running Specified Programs-enable-2.jpg
C) Type in 1 and click/tap on OK. (see screenshot below)
Name:  Enable-3.jpg
Views: 8928
Size:  35.6 KB
D) In the left pane, right click or press and hold on Explorer, click/tap on New and Key, type in DisallowRun, and press Enter. (see screenshot below)
Applications - Prevent Running Specified Programs-enable-4.jpg
E) In the right pane of DisallowRun, right click or press and hold on a empty space, and click/tap on New and String Value. (see screenshot below)
Applications - Prevent Running Specified Programs-enable-5.jpg
F) Type in the number (1 to ....) of the order that this EXE file will be in the list of disallowed applications and press Enter. Double click/tap on this number to modify it. (see screenshot below)
NOTE: For example, you would type 1 if this is the first EXE in the list, 2 if it's the second, 3 for the third, etc........
Applications - Prevent Running Specified Programs-enable-6.jpg

Applications - Prevent Running Specified Programs-enable-8.jpg

G) Type in the name of the EXE file (ex: cmd.exe) with file extension that you want to prevent from running, and click/tap on OK. (see screenshot below)
Name:  Enable-7.jpg
Views: 8905
Size:  32.5 KB
Tip   Tip
  • To change a listed EXE file name, double click/tap on the number of the EXE to modify it (step 4F), type the new EXE name, and click/tap on OK.
  • To remove a listed EXE file name, right click on the number of the EXE, then click/tap on Delete and Yes.


H) Repeat steps 4F and 4G until you have added any other EXE files (ex: #2 CCleaner) you want on the list of disallowed applications as well.
Click image for larger version

Name:	Enable-8.jpg
Views:	459
Size:	138.7 KB
ID:	69286
I) When finished, go to step 6 below.
5. To Allow All Applications to Run
NOTE: This is the default setting.
A) In the right pane of Explorer, right click on DisallowRun and click/tap on Delete. (see screenshot below)
Applications - Prevent Running Specified Programs-disable-1.jpg
B) Click/tap on Yes to approve. (see screenshot below)
Name:  Disable-2.jpg
Views: 8846
Size:  44.2 KB
C) In the left pane, right click or press and hold on DisallowRun, and click/tap on Delete. (see screenshot below)
Applications - Prevent Running Specified Programs-enable-9.jpg
D) Click/tap on Yes to approve, go to step 6 below. (see screenshot below)
Name:  Disable-4.jpg
Views: 8832
Size:  36.0 KB
6. If used, you may also wish to make changes to your list of allowed programs to run.

7. Close regedit.

8. Log off and log on, or restart the computer to apply.
That's it,
Shawn





22 Jul 2014   #1
avacs

Windows 7 Home Premium 32bit.
 
 
problem

Hi, my application goal that i would like to disallow it but in the second option don't worked for me, in the option 2 i tested and checked it in either win 7 and 8 but don't work correctly ! please help me if some thing is needed after that , thank you

My System SpecsSystem Spec
22 Jul 2014   #2
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Hello Avacs, and welcome to Seven Forums.

Please go ahead and post back with the name of the application that you are trying to block, and post some screenshots showing your settings from the tutorial to help see what the issue may be.

Screenshots and Files - Upload and Post in Seven Forums
My System SpecsSystem Spec
23 Jul 2014   #3
avacs

Windows 7 Home Premium 32bit.
 
 
problem

i did all of the steps in the picture above that you posted. and after doing all of these the application are opening again and dont stopped ever. i attached some pictures here maybe you understand my says !


Attached Thumbnails
Applications - Prevent Running Specified Programs-1.png   Applications - Prevent Running Specified Programs-2.png   Applications - Prevent Running Specified Programs-3.png  
My System SpecsSystem Spec
.


23 Jul 2014   #4
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Your settings look good to me. Did you restart the computer to apply?
My System SpecsSystem Spec
4 Weeks Ago   #5
avacs

Windows 7 Home Premium 32bit.
 
 

thank you admin after i restarted my pc this option worked as well ,
i don't want the error be appear when i clicked on the icon, can be without any errors and opening without windows ? (Nothing happen after clicking)


My System SpecsSystem Spec
4 Weeks Ago   #6
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Good news.

Unfortunately, since you have Windows 7 Home Premium, you do not have Group Policy that you could use to set to only block that file for specific users and not for your account or administrators.

If you like, you could also use Parental Controls to block a standard user from running that app instead. This way, you will still be able run the app.

Parental Controls - Allow or Block Specific Programs
My System SpecsSystem Spec
4 Weeks Ago   #7
avacs

Windows 7 Home Premium 32bit.
 
 

is the problem solved in windows 8 or 8.1 ?
i dont want the application error's appear on the windows display ?
My System SpecsSystem Spec
4 Weeks Ago   #8
Brink
Microsoft MVP

64-bit Windows 8.1 Enterprise
 
 

Avacs,

The message is by design and serves as a notice for why users are not able to run the .exe. They will always show when a restricted app has been attempted to be opened.
My System SpecsSystem Spec
Comment

 Applications - Prevent Running Specified Programs




Tutorial Tools



Similar help and support threads for2: Applications - Prevent Running Specified Programs
Windows 7 Tutorial Category
128GSSD is full can't prevent applications from installing on the SSD Performance & Maintenance
Programs running in task manager, but no applications General Discussion
Prevent applications from adjusting mic levels General Discussion
Solved How do I prevent UAC from prompting me when running in admin mode System Security
Background process prevent to have full screen programs running General Discussion
Prevent users from running executables from usb sticks Customization
Close programs to prevent... BSOD Help and Support

Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 02:34 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33