How to Restrict User Access to Programs in Windows 10

Prevent programs from running at all or restrict users' access to them

4 min. read

Updated onOctober 4, 2023

updated onOctober 4, 2023

Share this article

Improve this guide

Read our disclosure page to find out how can you help Windows Report sustain the editorial teamRead more

Key notes

Network administrators might need to block user access to certainWindows 10programs for various reasons.

There are a few ways that network administrators, and anybody else, can blockusersfrom running certain software on their desktops or laptops.

Users canapply locks to foldersoradd passwords to programswith third-party software. However,userscan also block access to programs inWindows 10without any third-party software as follows.

How can I restrict access to only certain programs for users on Windows 10?

1. Block Software from running by editing the Registry

Users can stop certain programs from running by editing theregistry. It might be worth setting up asystem restore pointbefore editing theregistryso you can undo the changes if required. Then, follow the guidelines below.

Someusersmight not need to set up anExplorerkey if there’s already one there under the Policies subkey. If so,userscan skip the step for setting up a newExplorerkey.

Open the ComputerHKEY_CURRENT_USER Software Microsoft Windows CurrentVersion PoliciesExplorerpath in theRegistry Editor. Then, add the DisallowRun subkey to the existingExplorerkey instead.

To set up blocks for more software,userswill need to enter different names for string values within the DisallowRun key. For example, the string value names within the DisallowRun key for the second and third program blocks will need to be 2 and 3 as shown below.

If you’re establishing a seventh program block, enter 7 as the string value title.

2. Block user access to programs in Windows 10 via Group Policy Editor

Windows 10 Pro and Enterprise include the Group Policy Editor tool, with which users can stop programs running without editing the registry.

Users can adjust a Run only specified Windows applications setting with the Group Policy Editor. Moreover, you can configure access to some software to only be restricted for all or only certain users.

Press theWin+Rkeys at the same time on your keyboard to open the Run dialog.
Entergpedit.mscin the text box, and then click theOKbutton to open the Group Policy Editor.
Navigate toUser Configuration>Administrative Templates>Templateson the left of the Group Policy Editor window.
Double-click onRun only specified Windows applicationsto open that setting’s window.
Select theEnabledoption on theRun only specified Windows applicationswindow.
Press theShowbutton to open aShow Contentswindow.
Then click a line on theShow Contentswindow to enter the executable file name of the program to block. Some users might need to open the software’s folder to check what exe file name they need to enter.
Press theOKbutton.
Click theApplyandOKbuttons on theRun only specified Windows applicationswindow. These guidelines will block the program for all users on a device.
To block the software for a specific user, you’ll need to add theGroup PolicyObject Editor snap-in to the Microsoft Management Console. Then you can configure policies to apply to specific users as follows.
First, press theWinkey +Qkeyboard shortcut.
Enter mmc.exe in the search box, and select to open mmc.exe.
ClickYeson the UAC prompt window that might open.

14.Then clickFile>Add/Remove Snap-into open the window shown directly below.

Select Group Policy Object Editor on the left of the window.
Press theAddbutton.
ClickBrowseon theSelect Group Policy Objectwindow that opens.
Select theUserstab.
Then select an account to apply the policies to.
Press theOKbutton.
Click theFinishoption.
Select theOKoption on theAdd or Remove Snap-inswindow.
ClickFile>Save Ason the console window.
Enter a file title in the Save As window, and click theSavebutton.
Thereafter, double-click the saved MSC file to apply the block program policies to the selected account group.

That will launch the Group Policy Editor window from which you can select to block a program as outlined above.

That’s howuserscan block access to programs in Windows 10.Youcan unblock the software by erasing the new string values in theregistryor disabling theRun only specified Windows applicationssetting.

However, to ensure that you can always undo registry changes, set up system restore points before establishing program blocks. Then, you can reverse changes made even to adminaccountsby rolling Windows back to the restore point.

We hope you found this article helpful and managed to restrict user access to programs you don’t want them to open. Besides, you canblock Internet access for specific apps in Windowsto enjoy seamless network connectivity.

Let us know in the comments section below if you have any questions.

How to Restrict User Access to Programs in Windows 10#

How can I restrict access to only certain programs for users on Windows 10?#

1. Block Software from running by editing the Registry#

2. Block user access to programs in Windows 10 via Group Policy Editor#

How to Restrict User Access to Programs in Windows 10

How can I restrict access to only certain programs for users on Windows 10?

1. Block Software from running by editing the Registry

2. Block user access to programs in Windows 10 via Group Policy Editor