Registry Home > Security

Restrict Applications Users Can Run (All Windows) Popular

Windows gives the ability to restrict the applications that can be run by users on a workstation.

This tweak can be easily applied using WinGuides Tweak Manager.
Download a free trial now!

Open your registry and find the key [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer]

Create a new DWORD value and name it "RestrictRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run.

Then create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer\RestrictRun] and define the applications that are allowed. Creating a new string value for each application, named as consecutive numbers, and setting the value to the filename to be allowed (e.g. "regedit.exe").

Restart Windows for the changes to take effect.

Note: If you are the person who applies Group Policy, do not apply this restriction to yourself. If applied too broadly, this policy can prevent administrators from running Group Policy or the registry editors. As a result, once applied, you cannot change this policy except by reinstalling Windows.

Registry Editor Example
|NameTypeData|
|(Default)REG_SZ(value not set)|
|1REG_SZ"notepad.exe"|
|2REG_SZ"regedit.exe"|
-
|HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\...|
-
Registry Settings
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\
Explorer]
Value Name: RestrictRun

Related Tweaks

>> Recommended Download - check, repair and optimize your registry now with Registry Mechanic <<

Disclaimer: Modifying the registry can cause serious problems that may require you to reinstall your operating system. We cannot guarantee that problems resulting from modifications to the registry can be solved. Use the information provided at your own risk.

Last modified: June 11, 2002