ويندوز سيرفر Windows Server منع برامج من العمل عند اليوزر Prevent Users From Programs
Prevent Users From Running Certain Programs
Prevent programs from starting automatically in Windows
How to disable start up programs for only one user
I did a test to use two methods to prevent users from running specified application, like Chrome.اقتباس:
What is the best way to prevent users from running certain programs?
My organization doesn't use GPO. Domain is workgroup. All users given Administrator rights.
Then use administrator account or standard user account to run it, it will be prevent,
but these setting still could be changed by administrator.
-------------------------------------------------------------
Method 1. Apply Local Group Policy
-------------------------------------------------------------
1. Type gpedit.msc in search box, then press Enter.
2. Expand User Configuration -> Administrative Templates, then select System.
3. Double click the policy Don’t run specified Windows applications.
https://www.rise.company/forum/image...2020/10/30.jpg
4. Set the policy to Enabled, then select Show…
https://www.rise.company/forum/image...2020/10/31.jpg
5. Add the programs you would like to prevent the user from running to the List of disallowed applications.
Use the name of the application launching file such as chrome.exe.
https://www.rise.company/forum/image...2020/10/32.jpg
6. Restart PC.
7. Run the Chrome, it will show as following screenshot.
https://www.rise.company/forum/image...2020/10/33.jpg
-------------------------------------------------------------
Method 2. Apply Via Registry
-------------------------------------------------------------
1. Type regedit in search box, then press Enter.
2. Expand HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer
3. Right-click a blank area on the right side and add a new DWORD (32-bit) Value named DisallowRun.
4. Open “DisallowRun” and give it a Value of 1.
5. Right-click Explorer, then click NEW -> Key named DisallowRun
6. Select the DisallowRun folder on the left pane
https://www.rise.company/forum/image...2020/10/34.jpg
7. Right-click a blank area on the right side and add a new DWORD (32-bit) Value named 1.
8. Open “1” and give it a Value with the application you would like to block, like “chrome.exe “.
https://www.rise.company/forum/image...2020/10/35.jpg
9. Repeat steps 7 and 8 with any additional applications you wish to block.
10. Restart PC.
11. Run the Chrome, it will show as following screenshot.
https://www.rise.company/forum/image...2020/10/36.jpg
Note: This method is only for current user, so if you want to work for all users, you need to import the registry key to all users account.
Here are steps to export and import the registry key.
1. Right click Policies -> Export -> save.
https://www.rise.company/forum/image...2020/10/37.jpg
2. Copy the key, log on other user.
3. Open Registry -> File -> Import the key.
https://www.rise.company/forum/image...2020/10/38.jpg
المرجع:
https://social.technet.microsoft.com...7itprosecurity
https://www.sevenforums.com/tutorial...dC5DGSE8ugn34-
