There are a few ways that network administrators, and anybody else, can block users from running certain software on their desktops or laptops. Users can apply locks to folders or add passwords to programs with third-party software. However, users can also block access to programs in Win 10 without any third-party software as follows.
How can I restrict access to only certain programs for users on Windows 10?
1. Block Software from running by editing the Registry
Users can stop certain programs from running by editing the registry. It might be worth setting up a system restore point before editing the registry so you can undo the changes if required. Then follow the guidelines below. Some users might not need to set up an Explorer key if there’s already one there under the Policies subkey. If so, users can skip the step for setting up a new Explorer key. Open the Computer HKEY_CURRENT_USER Software Microsoft Windows CurrentVersion Policies Explorer path in the Registry Editor. Then add the DisallowRun subkey to the existing Explorer key instead. To set up blocks for more software, users will need to enter different names for string values within the DisallowRun key. For example, the string value names within the DisallowRun key for the second and third program blocks will need to be 2 and 3 as shown below. If you’re establishing a seventh program block, enter 7 as the string value title.
2. Block user access to programs in Windows 10 via Group Policy Editor
Windows 10 Pro and Enterprise include the Group Policy Editor tool, with which users can stop programs running without editing the registry. Users can adjust a Run only specified Windows applications setting with the Group Policy Editor. Moreover, you can configure access to some software to only be restricted for all or only certain users.
Press the Win + R keys at the same time on your keyboard to open the Run dialog.
Enter gpedit.msc in the text box, and then click the OK button to open the Group Policy Editor.
Navigate to User Configuration > Administrative Templates > Templates on the left of the Group Policy Editor window.
Double-click on Run only specified Windows applications to open that setting’s window.
Select the Enabled option on the Run only specified Windows applications window.
Press the Show button to open a Show Contents window.
Then click a line on the Show Contents window to enter the executable file name of the program to block. Some users might need to open the software’s folder to check what exe file name they need to enter.
Press the OK button.
Click the Apply and OK buttons on the Run only specified Windows applications window. These guidelines will block the program for all users on a device.
To block the software for a specific user, you’ll need to add the Group Policy Object Editor snap-in to the Microsoft Management Console. Then you can configure policies to apply to specific users as follows. SPONSORED
First, press the Win key + Q keyboard shortcut.
Enter mmc.exe in the search box, and select to open mmc.exe.
Click Yes on the UAC prompt window that might open.
Then click File > Add/Remove Snap-in to open the window shown directly below.
Select Group Policy Object Editor on the left of the window.
Press the Add button.
Click Browse on the Select Group Policy Object window that opens.
Select the Users tab.
Then select an account to apply the policies to.
Press the OK button.
Click the Finish option.
Select the OK option on the Add or Remove Snap-ins window.
Click File >Save As on the console window.
Enter a file title in the Save As window, and click the Save button.
Thereafter, double-click the saved MSC file to apply the block program policies to the selected account group. That will launch the Group Policy Editor window from which you can select to block a program as outlined above.
That’s how users can block access to programs in Windows 10. You can unblock the software by erasing the new string values in the registry or disabling the Run only specified Windows applications setting. To ensure that you can always undo registry changes, however, set up system restore points before establishing program blocks. Then you can reverse changes made even to admin accounts by rolling Windows back to the restore point. We hope you found this article helpful and managed to restrict user access to programs you don’t want them to open. Let us know in the comments section below if you have any questions.
Name *
Email *
Commenting as . Not you?
Save information for future comments
Comment
Δ
