Windows Server Prevent Users From Programs
Prevent Users From Running Certain Programs
Prevent programs from starting automatically in Windows
How to disable start up programs for only one user
What is the best way to prevent users from running certain programs?
My organization doesn't use GPO. Domain is workgroup. All users given Administrator rights.
I did a test to use two methods to prevent users from running specified application, like Chrome.
Then use administrator account or standard user account to run it, it will be prevent,
but these setting still could be changed by administrator.
-------------------------------------------------------------
Method 1. Apply Local Group Policy
-------------------------------------------------------------
1. Type
gpedit.msc in search box, then press
Enter.
2. Expand User Configuration -> Administrative Templates, then select
System.
3. Double click the policy
Dont run specified Windows applications.
4. Set the policy to
Enabled, then select
Show
5. Add the programs you would like to prevent the user from running to the List of disallowed applications.
Use the name of the application launching file such as
chrome.exe.
6. Restart PC.
7. Run the Chrome, it will show as following screenshot.
-------------------------------------------------------------
Method 2. Apply Via Registry
-------------------------------------------------------------
1. Type
regedit in search box, then press
Enter.
2. Expand HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Policies\Explorer
3. Right-click a blank area on the right side and add a new
DWORD (32-bit) Value named
DisallowRun.
4. Open
DisallowRun and give it a Value of 1.
5. Right-click Explorer, then click
NEW -> Key named
DisallowRun
6. Select the
DisallowRun folder on the left pane
7. Right-click a blank area on the right side and add a new
DWORD (32-bit) Value named
1.
8. Open
1 and give it a Value with the application you would like to block, like
chrome.exe .
9. Repeat steps 7 and 8 with any additional applications you wish to block.
10. Restart PC.
11. Run the Chrome, it will show as following screenshot.
Note: This method is only for current user, so if you want to work for all users, you need to import the registry key to all users account.
Here are steps to export and import the registry key.
1. Right click
Policies ->
Export ->
save.
2. Copy the key, log on other user.
3. Open
Registry ->
File ->
Import the key.
:
https://social.technet.microsoft.com...7itprosecurity
https://www.sevenforums.com/tutorial...dC5DGSE8ugn34-