Restrict programs group policy

Restart your system. You may also use Group policy editor to apply computer policies to your computer. To open Group policy editor, click on Start , type gpedit. Was this reply helpful? Yes No. Sorry this didn't help. Thanks for your feedback. Under Apply software restriction policies to the following users , click All users except local administrators. Right-click the security level that you want to set as the default, and then click Set as default.

In certain directories, setting the default security level to Disallowed can adversely affect your operating system. Under Apply software restriction policies to the following , click All software files. Skip to main content. This browser is no longer supported. Download Microsoft Edge More info. Contents Exit focus mode. Please rate your experience Yes No.

Any additional feedback? Note To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. Note To perform this procedure, you must be a member of the Domain Admins group. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure.

To set policy settings that will be applied to computers, regardless of which users log on to them, click Computer Configuration. To set policy settings that will be applied to users, regardless of which computer they log on to, click User Configuration.

Warning Different administrative credentials are required to perform this procedure, depending on your environment: If you create new software restriction policies for your local computer: Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

If you create new software restriction policies for a computer that is joined to a domain, members of the Domain Admins group can perform this procedure.

Note Different administrative credentials are required to perform this procedure, depending on the environment in which you add or delete a designated file type: If you add or delete a designated file type for your local computer: Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure.

Warning Membership in the local Administrators group, or equivalent, is the minimum required to complete this procedure. If it is common for users to be members of the local Administrators group on their computers in your organization, you may not want to enable this option.

You should only be able to run apps to which you explicitly allowed access. To reverse your changes, you can delete the Explorer key you created along with the RestrictRun subkey and all values or you can set that RestrictRun value you created back to 0, turning off restricted access.

If you use the Pro or Enterprise version of Windows, blocking or restricting apps can be a little easier because you can use the Local Group Policy Editor to do the job. One big advantage is that you can apply policy settings to other users—or even groups of users—without having to log in as each user to make the changes the way you do when making these changes with Registry Editor.

You can read all about that in our guide to applying local Group Policy tweaks to specific users. Start by finding the MSC file you created for controlling policies for those particular users. Double-click to open it and allow it to make changes to your PC.

You can now exit the Local Group Policy window. To test your changes, sign in with one of the affected user accounts and try to launch an app to which the user should not have access.

Instead of launching the app, you should see an error message. If you want to disable your changes, just head back into the Local Group Policy editor by double-clicking your MSC file again. Use Google Fonts in Word. Use FaceTime on Android Signal vs.

Customize the Taskbar in Windows What Is svchost. Best Smartwatches. Best Gaming Laptops. Best Smart Displays. Best Home Security Systems. Best External Solid State Drives. Best Portable Chargers. Best Phone Chargers. Best Wi-Fi Range Extenders. Best Oculus Quest 2 Accessories.

Best iPad Air Cases. Awesome PC Accessories. Best Linux Laptops.