+ Post New Thread
Results 1 to 7 of 7
Windows Thread, Need Help Please to Restrict Users from Running Specific Applications in Technical; Hi All, Can someone please help me, I would like to restrict users from running specific EXE (executable) applications (for ...
  1. #1

    Join Date
    Apr 2010
    Location
    London
    Posts
    12
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Need Help Please to Restrict Users from Running Specific Applications

    Hi All,

    Can someone please help me, I would like to restrict users from running specific EXE (executable) applications (for an example calculator calc.exe or notepad.exe). I tried doing it through Regedit using the following keys on Windows XP:

    ""Open your registry and find the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion \Policies\Explorer]

    Create a new DWORD value and name it "DisallowRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.

    Then create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer\DisallowRun] and define the applications the are to be restricted. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be restricted (e.g. "notepad.exe").""


    However when I try to create a New Sub Key called "DisallowRun" it sends back an error message telling me it cannot rename the Sub Key (it doesn't give me no more info in the error) but however in the same location I can create another new sub-key and call it anything I like but it just does not let me rename the folder to "DisallowRun". (I can create DWORD value and name it "DisallowRun" key but it does not like me creating a New Subkey and calling it "DisallowRun").

    1. Is there something that I am doing wrong in the regedit?
    2. Are there any other free programs that I can use to block certain applications?
    3. Are there any paid programs that I can try (free trial before I purchase it) excluding LANSchool, AB Tutor and etc?
    4. Are there any other ways I can block certain Applications?


    Can someone please help me, thanks in advance.

    Kind Regards,
    Richard
    Last edited by richrad_mills; 10th February 2011 at 06:32 PM.

  2. #2

    Join Date
    Mar 2007
    Posts
    1,748
    Thank Post
    79
    Thanked 288 Times in 219 Posts
    Rep Power
    70
    google software restriction policy.

  3. Thanks to strawberry from:

    richrad_mills (10th February 2011)

  4. #3

    Join Date
    Apr 2010
    Location
    London
    Posts
    12
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks for the reply strawberry, I will look into this.

    Anymore advice is welcome.

  5. #4
    steve's Avatar
    Join Date
    Oct 2005
    Location
    West Yorkshire
    Posts
    1,043
    Thank Post
    22
    Thanked 177 Times in 123 Posts
    Rep Power
    51
    Software restriction policies via a GPO are the best way to go to permanently block an exe

    Alternatively do you have anything like AB tutor Control? You could get a single license for that and block stuff on all your clients plus lots of other benefits too.

  6. Thanks to steve from:

    richrad_mills (11th February 2011)

  7. #5
    bio
    bio is offline
    bio's Avatar
    Join Date
    Apr 2008
    Location
    netherlands
    Posts
    520
    Thank Post
    16
    Thanked 130 Times in 102 Posts
    Rep Power
    37
    Indeed software restriction policies. I would use the HASH version so users can't start notepad.exe if its renamed to (for example) asdasd.exe.

    bio..

  8. Thanks to bio from:

    richrad_mills (11th February 2011)

  9. #6
    Azhibberd's Avatar
    Join Date
    May 2008
    Location
    Newbury,Berkshire
    Posts
    169
    Thank Post
    20
    Thanked 21 Times in 20 Posts
    Rep Power
    16
    Another vote for the software restriction policy... GPO > User > windows > Security > Software restriction policies - We by default have it set to disallowed, Then have additional rules added for what we want to run... That way only allowed applications are allowed.. And you can simply choose not to add those to your list... Although just remember if you have multiple dc's the netlogon area will have to be allowed for each dc for logon scripts

  10. Thanks to Azhibberd from:

    richrad_mills (11th February 2011)

  11. #7

    Join Date
    Apr 2010
    Location
    London
    Posts
    12
    Thank Post
    16
    Thanked 0 Times in 0 Posts
    Rep Power
    0
    Thanks steve, bio and Azhibberd for the advice. I will use GP to block these programs.

    Kind regards,
    Richard

SHARE:
+ Post New Thread

Similar Threads

  1. Restrict access of listing domain users
    By weeb in forum Windows 7
    Replies: 1
    Last Post: 19th January 2011, 11:09 PM
  2. Replies: 9
    Last Post: 14th December 2010, 08:15 AM
  3. Applications not running under network users
    By newdriftking-2008 in forum Mac
    Replies: 2
    Last Post: 21st October 2010, 02:39 PM
  4. Restrict Access for Non-Domain Users
    By jag2050 in forum Windows Server 2000/2003
    Replies: 4
    Last Post: 1st October 2009, 11:43 AM
  5. Stop applications running at certain times
    By timbo343 in forum Windows
    Replies: 5
    Last Post: 27th April 2007, 01:08 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •