How to Prevent a User From Running a Program With a Group Policy

The Group Policy Editor is a powerful Windows utility that allows advanced users and administrators to place restrictions and permissions specific to users or local machines. Preventing users from running certain programs can be easily accomplished by creating a new path rule within the Group Policy. You will need administrative privileges to be able to make these modifications. Proceed with caution when working with this utility.

Instructions

1. Log into the system as an administrator. Click "Start," type "gpedit.msc" in the "Start Search" text field and press "Enter." The Group Policy Editor will open.

2. Expand "Computer Configuration," "Windows Settings," "Security Settings" and "Software Restriction Policies."

3. Right click the "Additional Rules" subfolder. Choose "New Path Rule..." from the pop-up menu. The "New Path Rule" window will open.

4. Click the "Browse..." button and select the program you wish to prevent users from running. Click "OK" in the "Browse for File or Folder" window.

5. Choose "Disallowed" from the "Security Level" drop-down menu, then click "OK" to save changes. Close the Group Policy Editor and restart the system.

References

• Technet Microsoft: Create a Path Rule
• Technet Microsoft: Software Restriction Policies and Related Components