Hi,
I am looking for a piece of software that can disable certain applications in Windows. So basically I could block a program like Skype no matter what the user calls it. I need it to be reliable and virus free because it is for a school. I want users to be able to run any program except those listed as banned by the system admin.
Thanks
- JamesAS
You could make a request in Coding Snacks
Please read the rules and instructions before posting. If anyone there knows of a program already existing, they will suggest it. Or they may offer to write one if they think it feasible. Myself I know of no way to detect a program has been renamed and still identify it. Perhaps someone on that forum will though.
Welcome to the Seven Forums.
Preventing user from running an app would normally be handled by the group policy settings for disallowrun.
It should require admin rights to rename a program. There are a lot more settings that would have to be changed to lock down a computer so that users cannot boot to a CD/DVD based OS, run a portable version of an app via USB, install apps, ....
You might want to look at this info:
Download Group Policy Settings for Creating a Steady State from Official Microsoft Download Center
Also realize when using Group Policy that things like an install can elevate privileges. I got a surprise when I had Group Policy set to never run IE. Everything going along fine for weeks. Then I installed an app that just had to load IE to show me some info in HTML. Bingo!! Up comes IE because the installer had more privilege than my Owner account.. even though Owner was in Administrator's Group. Go figure!!
Thanks
I think this is enough information for me to find tweaks and controls to block programs
Also you can simply try to use standard file permissions to block the program files from executing. Look for the program you want to block, go to its folder and deny all access to the user accounts you want to prevent access (of course, as long as those aren't admins). No matter how they try to access the program, they'll get an "access denied" error.
Quote