Rise Company
22-10-2020, 01:48
ويندوز سيرفر Windows Server منع برامج من العمل عند اليوزر Prevent Users From Programs
Prevent Users From Running Certain Programs
Prevent programs from starting automatically in Windows
How to disable start up programs for only one user
What is the best way to prevent users from running certain programs?
My organization doesn't use GPO. Domain is workgroup. All users given Administrator rights.
I did a test to use two methods to prevent users from running specified application, like Chrome.
Then use administrator account or standard user account to run it, it will be prevent,
but these setting still could be changed by administrator.
-------------------------------------------------------------
Method 1. Apply Local Group Policy
-------------------------------------------------------------
1. Type gpedit.msc in search box, then press Enter.
2. Expand User Configuration -> Administrative Templates, then select System.
3. Double click the policy Don’t run specified Windows applications.
https://www.rise.company/forum/images/imported/2020/10/30.jpg
4. Set the policy to Enabled, then select Show…
https://www.rise.company/forum/images/imported/2020/10/31.jpg
5. Add the programs you would like to prevent the user from running to the List of disallowed applications.
Use the name of the application launching file such as chrome.exe.
https://www.rise.company/forum/images/imported/2020/10/32.jpg
6. Restart PC.
7. Run the Chrome, it will show as following screenshot.
https://www.rise.company/forum/images/imported/2020/10/33.jpg
-------------------------------------------------------------
Method 2. Apply Via Registry
-------------------------------------------------------------
1. Type regedit in search box, then press Enter.
2. Expand HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer
3. Right-click a blank area on the right side and add a new DWORD (32-bit) Value named DisallowRun.
4. Open “DisallowRun” and give it a Value of 1.
5. Right-click Explorer, then click NEW -> Key named DisallowRun
6. Select the DisallowRun folder on the left pane
https://www.rise.company/forum/images/imported/2020/10/34.jpg
7. Right-click a blank area on the right side and add a new DWORD (32-bit) Value named 1.
8. Open “1” and give it a Value with the application you would like to block, like “chrome.exe “.
https://www.rise.company/forum/images/imported/2020/10/35.jpg
9. Repeat steps 7 and 8 with any additional applications you wish to block.
10. Restart PC.
11. Run the Chrome, it will show as following screenshot.
https://www.rise.company/forum/images/imported/2020/10/36.jpg
Note: This method is only for current user, so if you want to work for all users, you need to import the registry key to all users account.
Here are steps to export and import the registry key.
1. Right click Policies -> Export -> save.
https://www.rise.company/forum/images/imported/2020/10/37.jpg
2. Copy the key, log on other user.
3. Open Registry -> File -> Import the key.
https://www.rise.company/forum/images/imported/2020/10/38.jpg
المرجع:
https://social.technet.microsoft.com/Forums/Lync/en-US/f47e86b7-85e6-41e2-8c64-efcbcbe8e36c/prevent-users-from-running-certain-programs?forum=w7itprosecurity
https://www.sevenforums.com/tutorials/80605-applications-prevent-running-specified-programs.html?__cf_chl_jschl_tk__=d93140d934ce5d36 f2b2b330242e37e4fe2ca00a-1603324477-0-Afbjz47qbMKsn2p9yOTaQa8dlDxUfg9U8HCAgBlvSDVtbHjRYE LZAyzL2tabB8iSxVh2WBsRRSqxNRHAK5IC17dm4Q5jc-CwmzJw7oX25WClw3LlvrhTksg-jgRzaM69jBOFbmMW0xCfs8LGmJqHbTfFqzAL8BFU7MiXEflrnp 3bLsF532h3cuIXpQqoPCzufUZHcqsvYZuzDfUOYKEJdcfv3alj d30k3W6GU3A3FGiFCMLnVLQOWGGXXMCyCDJJqfbKxesEeTjiP3 mzjuH4RVL101X7f1aGnWI_-nfEWZ5g646_RF5UsybO-FqWNUHDFkelvReZmHzz7Eu9ib2azD2Cx2NEGap1RvGKkSjbBtZ 10vfjDU2dN_4-kEN5hTgOhbV4PguYeC7SmhUnSz3QjXEZakW4yhdC5DGSE8ugn3 4-
Prevent Users From Running Certain Programs
Prevent programs from starting automatically in Windows
How to disable start up programs for only one user
What is the best way to prevent users from running certain programs?
My organization doesn't use GPO. Domain is workgroup. All users given Administrator rights.
I did a test to use two methods to prevent users from running specified application, like Chrome.
Then use administrator account or standard user account to run it, it will be prevent,
but these setting still could be changed by administrator.
-------------------------------------------------------------
Method 1. Apply Local Group Policy
-------------------------------------------------------------
1. Type gpedit.msc in search box, then press Enter.
2. Expand User Configuration -> Administrative Templates, then select System.
3. Double click the policy Don’t run specified Windows applications.
https://www.rise.company/forum/images/imported/2020/10/30.jpg
4. Set the policy to Enabled, then select Show…
https://www.rise.company/forum/images/imported/2020/10/31.jpg
5. Add the programs you would like to prevent the user from running to the List of disallowed applications.
Use the name of the application launching file such as chrome.exe.
https://www.rise.company/forum/images/imported/2020/10/32.jpg
6. Restart PC.
7. Run the Chrome, it will show as following screenshot.
https://www.rise.company/forum/images/imported/2020/10/33.jpg
-------------------------------------------------------------
Method 2. Apply Via Registry
-------------------------------------------------------------
1. Type regedit in search box, then press Enter.
2. Expand HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer
3. Right-click a blank area on the right side and add a new DWORD (32-bit) Value named DisallowRun.
4. Open “DisallowRun” and give it a Value of 1.
5. Right-click Explorer, then click NEW -> Key named DisallowRun
6. Select the DisallowRun folder on the left pane
https://www.rise.company/forum/images/imported/2020/10/34.jpg
7. Right-click a blank area on the right side and add a new DWORD (32-bit) Value named 1.
8. Open “1” and give it a Value with the application you would like to block, like “chrome.exe “.
https://www.rise.company/forum/images/imported/2020/10/35.jpg
9. Repeat steps 7 and 8 with any additional applications you wish to block.
10. Restart PC.
11. Run the Chrome, it will show as following screenshot.
https://www.rise.company/forum/images/imported/2020/10/36.jpg
Note: This method is only for current user, so if you want to work for all users, you need to import the registry key to all users account.
Here are steps to export and import the registry key.
1. Right click Policies -> Export -> save.
https://www.rise.company/forum/images/imported/2020/10/37.jpg
2. Copy the key, log on other user.
3. Open Registry -> File -> Import the key.
https://www.rise.company/forum/images/imported/2020/10/38.jpg
المرجع:
https://social.technet.microsoft.com/Forums/Lync/en-US/f47e86b7-85e6-41e2-8c64-efcbcbe8e36c/prevent-users-from-running-certain-programs?forum=w7itprosecurity
https://www.sevenforums.com/tutorials/80605-applications-prevent-running-specified-programs.html?__cf_chl_jschl_tk__=d93140d934ce5d36 f2b2b330242e37e4fe2ca00a-1603324477-0-Afbjz47qbMKsn2p9yOTaQa8dlDxUfg9U8HCAgBlvSDVtbHjRYE LZAyzL2tabB8iSxVh2WBsRRSqxNRHAK5IC17dm4Q5jc-CwmzJw7oX25WClw3LlvrhTksg-jgRzaM69jBOFbmMW0xCfs8LGmJqHbTfFqzAL8BFU7MiXEflrnp 3bLsF532h3cuIXpQqoPCzufUZHcqsvYZuzDfUOYKEJdcfv3alj d30k3W6GU3A3FGiFCMLnVLQOWGGXXMCyCDJJqfbKxesEeTjiP3 mzjuH4RVL101X7f1aGnWI_-nfEWZ5g646_RF5UsybO-FqWNUHDFkelvReZmHzz7Eu9ib2azD2Cx2NEGap1RvGKkSjbBtZ 10vfjDU2dN_4-kEN5hTgOhbV4PguYeC7SmhUnSz3QjXEZakW4yhdC5DGSE8ugn3 4-