How to block program from starting.

Hi. Some people having problems that other computer user of the computer trying to use applications without your permission, and if you don't want that to happen,you may want to follow these steps to block applications from starting.

This method applied the information from the Microsoft Technet. : http://technet.microsoft.com/en-us/library/cc960900.aspx

And also translate information from this website for more info. : http://guru.citec.us/1308/%E0%B8%A7%E0%B8%B4%E0%B8%98%E0%B8%B5%E0%B8%81%E0%B8%B2%E0%B8%A3%E0%B8%9A%E0%B8%A5%E0%B9%87%E0%B8%AD%E0%B8%81%E0%B9%84%E0%B8%9F%E0%B8%A5%E0%B9%8C%E0%B8%99%E0%B8%B2%E0%B8%A1%E0%B8%AA%E0%B8%81%E0%B8%B8%E0%B8%A5-%E0%B8%AB%E0%B8%A3%E0%B8%B7%E0%B8%AD%E0%B8%88%E0%B8%B3%E0%B8%9E%E0%B8%A7%E0%B8%81%E0%B9%84%E0%B8%9F%E0%B8%A5%E0%B9%8C%E0%B9%80%E0%B8%81%E0%B8%A1%E0%B8%99%E0%B8%B5%E0%B9%89%E0%B8%95%E0%B9%89%E0%B8%AD%E0%B8%87%E0%B8%97%E0%B8%B3%E0%B8%A2%E0%B8%B1%E0%B8%87%E0%B9%84%E0%B8%87%E0%B8%84%E0%B8%A3%E0%B8%B1%E0%B8%9A

Remember: To use this method, you must be computer Administrator!

So. Lets being!

1. Open registry editor.

Go to Run>regedit>press Enter

2.Go to this key : HKEY_CURRENT_USER>software>microsoft>windows>currentversion>Policies>Explorer

3.Then Create new DWORD value name "disallowrun" without quotes.

4. Change its value to 1 by double click it>Type in value data "1" without quotes. > press Enter.

5.Create Subkey by right click>new>key>Name it "DisallowRun" without quotes.

6.Goto disallowrun key and create new STRING value name "1" without quotes.

7.Add programs name by type in the program name with its extension in value data box.

8.If you want to add more programs or files, repeat step 5-7 but change key name to 2 3 4 ....

9.Restart Computer

10.Trying to open that program and you will got the message box title "Restrcition" and you cannot open that program until you change value of DWORD value at step 4 to 0.

Hope this can help you!

Thank you.

Edited by Sirawit, 22 June 2013 - 12:36 AM.

Thanks for your tutorial.

Note>>>>

A suggestion has been made that involves modifying the registry. Modifying the registry can be dangerous (and can render your system unbootable) so it's advisable that you make a backup of the registry before proceeding.
Modification of the registry can be EXTREMELY dangerous if you do not know exactly what you are doing so follow the steps that are listed below EXACTLY. if you cannot perform some of these steps or if you have ANY questions please ask BEFORE proceeding.

Backing Up Your Registry

• Go Here and download ERUNT
  (ERUNT (Emergency Recovery Utility NT) is a free program that allows you to keep a complete backup of your registry and restore it when needed.)
• Install ERUNT by following the prompts
  (use the default install settings but say no to the portion that asks you to add ERUNT to the start-up folder, if you like you can enable this option later)
• Start ERUNT
  (either by double clicking on the desktop icon or choosing to start the program at the end of the setup)
• Choose a location for the backup
  (the default location is C:\WINDOWS\ERDNT which is acceptable).
• Make sure that at least the first two check boxes are ticked
• Press OK
• Press YES to create the folder.

Registry Modifications

For more information about modifying the registry, see this Microsoft article: http://support.microsoft.com/default.aspx/kb/256986

Thank you!

After I read article on Microsoft Website, I think this can be done with group policy editor too. And your suggestion about backup registry is great too!

OK. From bloopme suggestions.

Note>>>>

A suggestion has been made that involves modifying the registry. Modifying the registry can be dangerous (and can render your system unbootable) so it's advisable that you make a backup of the registry before proceeding.
Modification of the registry can be EXTREMELY dangerous if you do not know exactly what you are doing so follow the steps that are listed below EXACTLY. if you cannot perform some of these steps or if you have ANY questions please ask BEFORE proceeding.

So, I'm making another tutorial that NOT use registry editor so it will be safer.

Let's begin.

1. Go to Run > gpedit.msc > OK

2. Local Group Policy Editor will open

3. Go to User Configuration > Administrative Templates > Systems

\

4.You will see item name "Don't run specified Windows Applications". Double click it then it will be like this.

5. Check the box "Enabled". Then, in Options box, click "Show...".

6. Show Contents Dialog box will open. Add program names in the box one line per program.

7. Click OK > Apply > OK. Close Local Group Policies editor. And the changes will take affect like this.

Hope this will be better solutions for who don't want to directly mess up with registry because LGPE will do all for you without problems. (If you read description first.)

Note:

If you want to use programs you block again, simply check disable (temporarily allow) or

Not Configured (Permanently allow) at step 5 to disable program block.

Or if you want to allow specify program, delete it from the list at step 6.

Thank you! Hope this will be better solution!

Edited by Sirawit, 26 June 2013 - 10:55 AM.

Thank you, your post is helpful for me, when i start my computer some applications will automatically run,they always slow down my computer speed.

Thank you, your post is helpful for me, when i start my computer some applications will automatically run,they always slow down my computer speed.

Thanks, but if you just want to block startup program, you just disable startup program. My method will not allow program to run anymore. (Untill you disable the config.) I will make tutorial later for how to do that.

Edited by Sirawit, 27 June 2013 - 10:48 PM.

Thanks i've allways had problem with that. No i can handle with that You are awesome

No problem.

Thank man. Nice guide