You might want to prevent or restrict users certain not to use some specific programs and applications in Microsoft Windows 7. You can do it in two ways: either via Group Policy Editor or via editing the registry. There is no doubt, that restricting via Group Policy Editor is far more easy than editing the registry, but unfortunately, Group Policy Editor is not accessible beyond Windows 7 Ultimate or Windows 7 Enterprise. So, users other than those two versions have to follow the registry route.
Prevent running specified programs and applications in Windows 7 (Via Group Policy Editor: for Windows 7 Ultimate and Windows 7 Enterprise)
Click Start button, type ” Edit Group Policy ” and the corresponding program will appear on top of the list; hit Enter from keyboard and accept the security prompt :
---
Windows Group Policy Editor will launch. In the sided left pane, click on to expand User Configuration, Administrative Templates, and System :
In the right sided pane, right click on Don’t run specified Windows applications and click on Edit :
Click on the Enabled radio button to make it active. Then click Show button:
After Clicking Show button, this window will appear, just enter the name with exe extension in the list. We are showing the example of Windows Media Player :
This error window will pop up when the user will want to run the program (Windows Media Player in our example):
Prevent running specified programs and applications in Windows 7 (Via Registry Editor: for all versions of Windows 7)
Click Start button, type ” regedit “ (without the quotation marks) and hit Enter from key board:
In regedit, navigate to the location below :
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
n the right pane of Explorer, right click on a empty space and click on New and DWORD (32-bit) Value:
Name it as DisallowRun and press Enter. Right click on DisallowRun and click on Modify. Enter its value as 1.
In the left pane, right click on Explorer and click on New and Key. Type DisallowRun and press Enter:
In the right sided pane of DisallowRun, right click on a empty space and click on New and String Value ; Type 1,2,3 and so on as many program you want to block:
Right Click each entry to Modify and enter the name with exe extension. We are showing the example of Windows Media Player :
The result will be same as we got via Group Policy Editor.
Tagged With administrative templates dont run specified windows applications registry key , group policy to prevent running programs , group policy prevent application from running , how to prevent appliction to run in windows 7 , group policy prevent applications running help , GPO preventing application launch , gpo prevent programs from running , gpo not preventing application from launching , enable dont run specified windows application registry , Win 7 group policy preventing BgInfo from launching
Hi.. Fab Web.. Thanks..
And if I want that nobody but “admin” could run the “Edit Group Policy” (gpedit.msc).. what options do I have?
You are welcome.
In Windows 7 you can apply policies only to a specific account, but you have to load the group policy object editor from the Microsoft Management Console, not by opening the snapin directly.
1. Open mmc.exe by typing it in run box (Windows logo key + R)
2. When the MMC console opens, click “File” -> “Add/remove snapin”
3. Select “Group Policy Object Editor” and click the “Add >” button
4. In the dialog which appears, click “Browse”.
5. Click the “users” tab and select a user.
6. Click “OK”, then “Finish”, then “OK” again to apply the changes.
You will now have a group policy user object for the selected user. Apply whatever restrictions you want.
Click the “users” tab and select a user.