Restrict Certain Users from Using Programs on Your PC
September 11th, 2007If you share your computer or if your computer is sometimes accessed by other users, you may want to restrict users from running specific applications. You can restrict certain users from using specific programs on your PC with a registry fix. Creating this registry fix can make it difficult for specific users to run applications, programs, and files, and restrict specified users from access to various areas of your computer.
How to Restrict Certain Users from Using Programs on Your PC (Registry Tweak Instructions)
For registry fix “Restrict Certain Users from Using Programs on Your PC,” you’ll need to:
Backup your system and its important files before editing your registry.
Now, open your registry. You can open your registry by using the Registry Editor (REGEDIT.exe), which is a program automatically included with most Windows operating systems. The Registry Editor lets you view, edit, and search data within the your system’s registry. You can launch your Registry Editor many ways, and the easiest way to is to click the “Start” button, select “Run,” and type “regedit” inthe “Open” box (click here for a sample image of Registry Editor and instructions on how to use Registry Editor).
To restrict users from running specific applications, you will need to find [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer] in your registry. Next you’ll need to create a new DWORD value, and name it DisallowRun. You’ll set its value to “1″ to enable the application restrictions feature (setting to “0″ would allow all applications to continue running).
You’ll also need to create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun].This next step will involve defining the applications that need to be restricted. You’ll do this by creating a new string value for each application, and setting their values to that of the filename.
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: DisallowRun
Click here for more about registry settings.
Now you can exit your registry and Registry Editor. You’ll probably need to log out of Windows for this registry tweak to take effect.
Remember:
Modifying your system’s registry can cause serious problems that may require reinstalling your Windows OS. We can’t guarantee any problems resulting from your modifying your Window registry can be fixed. You’re using these manual Windows registry fix or registry repair instructions at your own risk. It’s highly recommended you backup your system and its important files before editing your registry.
Using a Registry Editor to Restrict Certain Users from Using Programs on Your PC
When you want to perform a registry fix such as Restrict Certain Users from Using Programs on Your PC, it’s necessary to understand how to use your Windows system’s Registry Editor.
Once you’ve launched Registry Editor - or “REGEDIT.exe” - you’ll notice on the left-hand side of the Registry Editor window there is a tree of folders, and on the right-hand side of the window the contents - or the “values” - of the folder you’ve selected are displayed.
Similar to when you’re using web browser Internet Explorer, when you want to expand a branch of your registry’s folder tree and see the structure of a section of the registry, you simply double-click on the folder or click once on the plus sign (+). To see the contents of a key - or “folder” - you simply click on the key and view the values listed in the right-hand side of the window.
To add a key or value, you’ll right-click the “Edit” menu with your mouse, then select “New.” You can also rename almost any key and any value in about the same way you’d rename a file on your computer: just right-click the registry key or value and select “Rename,” slowly click on the registry key or value twice, or simply press F2 on your keyboard. You can delete a registry key or registry value by clicking on it to select it and pressing “Delete,” or by right-clicking the registry value or key and selecting “Delete.”
You should backup your registry before you make any changes to it. Editing your registry can be intimidating to you if you’re not a computer expert, and when you change or a delete a critical registry key or registry value, there’s a chance you may need to reinstall your entire Windows operating system, or damage your PC beyond repair.
About Registry Settings
Data Type
The “Data Type” refers to the type of data - or data format - of the registry value. Data types are usually:
- REG_BINARY, in which the value is stored in raw binary code.
- REG_DWORD, which is typically used for boolean values in your registry and is a four-byte number. This registry data type might show in your REGEDIT tool as a decimal or hexadecimal format.
- REG_EXPAND_SZ, which is a string of variables that are replaced when this data type is called to action by software.
- REG_MULTI_SZ, which is used for registry values that are composed of multiple values or lists. In this data format, each of these values or lists are seperated by a null character type.
- REG_SZ, which is used for text values and strings.
System Key
“System Key” stands for the location of a Windows registry value. Usually your computer’s system keys can be found under “HKEY_LOCAL_MACHINE”, and because of this system keys will affect your entire system.
User Key
Your “User Key” in your registry stands for the location of a specific Windows registry value. Typically, your computer’s user keys can be found under “HKEY_CURRENT_USER”, and because of this, user keys only affect the settings of the current Windows system user or account.
Value Data
“Value Data” refers to what data is acceptable to be written to the registry value.
Value Name
The “Value Name” refers to what the name of a registry value that you’ll be creating or editing. Typically, value names are not case sensitive.
Enhance Your Security Through Registry Tweaks and Registry Hacks
Registry hacks and registry tweaks are not limited to improving your system’s software and account settings — you can also edit your Windows registry to enhance and improve your computer’s security.
And learning how to Restrict Certain Users from Using Programs on Your PC isn’t the only registry tweak for your Windows security –there are various registry tweaks you can perform that will improve your PC’s security. You can edit your registry and reset your screensaver’s password, you can edit your registry so that specific users are blocked from running certain software, you tweak your registry so that drives are hidden on your computer, you can even edit your registry so that registry editing tools aren’t allowed.
If you’re a computer expert, you can browse the other security registry tweaks below to improve your PC’s security.
Registry Tweaks Related to Restrict Certain Users from Using Programs on Your PC
» Block Windows Hotkeys
» Block Users from Accessing Certain Drives
» Allow Certain Users to Access Windows Updates
» Customize Shells for Users
» Block User Profiles
» Block Users from Shutting Down System
» Stop Showing Last Windows Account Logged In
» Conceal Your PC from the Browser's List
» Control Network Connections
» Block Access of Anonymous Users
» Conceal Drives in Explorer and My Computer
» Restrict Active Desktop
» Deactivate Active Desktop
» Block Windows Registry Editing Software
» Require "Ctrl+Alt+Delete" for User Log In
» Restrict Certain Users from Using Programs on Your PC
» Stop Applications from Launching at Startup
» Change Your Screen Saver's Password
#1 Amar
May 22nd, 2007 at 11:17 pm
In restricting user from running certain applications section, you have not mentioned how to block a particular application. Eg. If i had to block registry editor tool itself then what shud i do in registry. you have not mentioned about the external application
#2 Patrick
February 25th, 2008 at 6:05 pm
Some clarification is needed: Your article states:
“To restrict users from running specific applications, you will need to find [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion \Policies\Explorer] in your registry. Next you’ll need to create a new DWORD value, and name it DisallowRun. You’ll set its value to “1″ to enable the application restrictions feature (setting to “0″ would allow all applications to continue running).
You’ll also need to create a new sub-key called [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun].This next step will involve defining the applications that need to be restricted. You’ll do this by creating a new string value for each application, and setting their values to that of the filename.
User Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
System Key: [HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: DisallowRun ”
However, no mention is made of adding a System Key. Also, please provide an example to restrict for example: Notepad.exe.
Thank you,
#3 Dr.Bat
June 12th, 2008 at 2:56 am
Simply renaming the file WILL solve it, and it will work great ,
If you blocked CMD.EXE, Simply rename to anything, CMD_.exe, DONE!