How to Prevent Users From Running Certain Programs on Windows 11

Method 1: Prevent Users From Running Certain Programs via the Group Policy Editor

The Local Group Policy Editor on Windowsmakes it easy to apply system-wide changes on a computer. One of the many options it includes is a policy that prevents users from running specific programs or EXE files on Windows 11.

Note:The Local Group Policy Editor is only available on Windows 11 Professional, Enterprise, and Education editions. If your PC runs Windows Home, this method will not work for you.

Step 1:Press theWindows key + Rto open the Run dialog box. Typegpedit.mscin the text box and hitOK.

Step 2:Use the left pane to navigate to the following folder:

Step 3:Double-click theDon’t run specified Windows applicationspolicy in the right pane.

Step 4:SelectEnabledand click theShowbutton under Options.

Step 5:Add the programs you want to block in theList of disallowed applicationssection. Enter thefile nameyou double-click to launch the app, such as itunes.exe, bittorent.exe, notepad.exe, and so on. Then, clickOK.

Step 6:ClickApply>OKto save your changes.

Once you complete the above steps, the specified programs will be blocked on your Windows 11 PC. To restore access to the blocked programs at any time, repeat the above steps and set the “Don’t run specified Windows applications” policy toNot ConfiguredorDisabled.

Method 2: Prevent Users From Running Certain Programs Using the Registry Editor

If you can’t access the Local Group Policy Editor or want to use a different method,edit a few registry filesto prevent users from running certain apps and programs on your Windows 11 PC.

Step 1:Click thesearch iconon the taskbar > typeregistry editor> selectRun as administrator.

Step 2:Paste the following path in the address bar at the top and pressEnterto quickly navigate to the Explorer key.

Step 3:Right-click on theExplorerkey > selectNew>DWORD (32-bit) Value> name itDisallowRun.

Step 4:Double-clickthe newly created DWORD > enter1in the value data field > clickOK.

Step 5:Right-click theExplorerkey again > selectNew>Key> name the new keyDisallowRun.

Step 6:Right-click theDisallowRun key> selectNew>String Value> name the value1.

Step 7:Double-clickthe newly added string value named 1. In the value data field, type the name of the program you want to block and clickOK. For instance, if you want to block iTunes, enteritunes.exein the text field.

Step 8:Repeat the previous step to add more string values, such as 2, 3, 4, and more. In their respective value data fields, enter the executable names of the programs you want to block.

After this, restart your PC, and the specified apps and programs will be blocked for the user account. To unblock an app later, go to the DisallowRun key in the Registry Editor and delete the string value associated with the program.

Was this helpful?

Last updated on 07 August, 2024

Leave a ReplyCancel reply

Your email address will not be published.Required fields are marked*

Name*

Email*

Comment*

Δ

The article above may contain affiliate links which help support Guiding Tech. The content remains unbiased and authentic and will never affect our editorial integrity.

More in Windows

How to Update Epic Games Launcher and Its Games on Windows

3 Ways to Force Quit a Program on Windows 11

JOIN THE NEWSLETTER

Get Guiding Tech articles delivered to your inbox.

© 2024 Guiding Tech Media. All Rights Reserved.