How do I block programs that are not installed on my Computer?

[RyRy]

As the title says I want to know how to block programs that are not installed in my units e.g. IDM, I run a computer shop business and my customers have been complaining lately that there's been a lot of people using IDM to download stuffs. I did disable program installations on my units but the problem is their IDM are already installed on their USB so I want to know if there's anything I can do or install to stop them from using it.


I'm new here so I'm not sure if my thread is on the right location I apologize if it's not.

 

[Berton]

Just taking a guess but is this the site/program your IDM refers to?
Internet Download Manager: the fastest download accelerator

 

[oneeyed]

You can use Software Restriction Policies which allow you to do just that. Be careful with what you deny though, it can brick your system when not used wisely.

While you can specifically block only IDM, if they are a bit smart they can bypass SRP by renaming the executable. So it is probably better to use a more restrictive policy and deny-all then allow a select few (mainly executables installed in the windows and programs directory). This will effectively block anything you haven't installed yourself as administrator. It is also a very effective way to block viruses and the like. The guide in my second link describes how to implement such a policy.

More info : Using Software Restriction Policies to Protect Against Unauthorized Software
And an excellent tutorial on how to setup SRP : How to make a disallowed-by-default Software Restriction Policy

 

[RyRy]

@Berton

Yes, that annoying program.

@oneeyed

Thank you! I'll try that and see how it goes. I'm not good with this stuffs but I'll try anyways.

 

[oneeyed]

If you feel lost with SRP, an easier solution is Parental Controls. It's much easier to set up and is also built in windows. SRP is more powerful and allows you to block/allow anything, Parental Controls is limited to block .exe

More info :
Set up Parental Controls - Windows Help
http://www.sevenforums.com/tutorials/54360-parental-controls-setup-use.html
http://www.sevenforums.com/tutorials/54397-parental-controls-allow-block-specific-programs.html

The second link in my first post (How to make a disallowed-by-default Software Restriction Policy) also describes how to use Parental Controls, although it's not the main focus