- Click Start > Run and type ‘ regedit ‘ to open registry editor.
- Find this key from left pane:
- Create a new DWORD value and name it "DisallowRun" set the value to "1" to enable application restrictions or "0" to allow all applications to run. Right click on the right pane > New > DWORD Value.
- Then create a new sub-key called [HKEY_CURRENT_USER\Software\ Microsoft\Windows\CurrentVersion \Policies\Explorer\DisallowRun] and define the applications to be restricted. Create a new string value for each application, named as consecutive numbers, and setting the value to the filename to be restricted. To create a new sub-key called DisallowRun, right click on the key Explorer then choose New > Key, named it DisallowRun. Now to make string value to restrict applications, click on new key you just created ‘DisallowRun’ from the left pane, then point your mouse to right pane on empty space and right click then choose New > String Value, named it as consecutive number (named it ‘1’ then the next string value named it ‘2’). Double click on that string value and then put application’s name that you want to restrict (if you want to restrict notepad then type in ‘ notepad.exe ‘ ), for each application that you want to restrict you have to make a new string value.
- Close registry editor, and try to run an application that you restricted before. You’ll get a warning message.
Note: Don’t restrict regedit, you can’t disable this feature if you restrict regedit.