- You can block a program name from running on your Windows PC by creating a DisallowRun registry value.
- You'll need the program file name of the application you want to block, such as notepad.exe or handbrake.exe.
- Users will not be able to double-click the file or select it from the Start menu to run it, but they can change its name to bypass the limitation.
Finding the Application Name
Open the Start menu Windows Start. Click the Windows logo in the bottom-left corner of the screen.
Find the program you want to block. You may need to click All Apps to expand the list.
Right-click the program and select More. Another menu will expand.
Click Open file location. This opens the file location of the program's shortcut in File Explorer.
Right-click the shortcut and select Open file location. This opens the program's actual file location.
Right-click the program's icon and select Properties. Doing so opens the Properties window for the program.
Review the application's name and extension. The file's name is listed in the text box at the top of the Properties window, while the extension is in parentheses to the right of the "Type of file" heading. You'll combine these two (e.g., "name.extension") to create the file's name in the Registry Editor. The extension will almost always be ".exe". For example, if you looked up the file location of Notepad, you'd find that its name is "Notepad.exe".
Creating Registry Keys
Open the Registry Editor. To get to Registry Editor quickly, type regedit into the Windows Search bar, then click Registry Editor in the search results. Click Yes when prompted. If you aren't an administrator, you won't be able to open the Registry Editor.
Navigate to the "Policies" folder. To do so: Double-click the HKEY_CURRENT_USER folder in the top-left side of the window. Double-click the Software folder below "HKEY_CURRENT_USER". Double-click the Microsoft folder. Double-click the Windows folder. Double-click the CurrentVersion folder. Click the Policies folder once to display its contents in the right panel.
Click the Edit menu. This tab is in the upper-left side of the Registry Editor window.
Select New and click Key. A new folder will appear below the "Policies" folder on the left-hand side of the window.
Type Explorer and press ↵ Enter. This will create a new folder that's titled "Explorer" in the "Policies" folder.
Click the Explorer folder in the left panel. This is the folder you just created.
Create a new DWORD value in the Explorer folder. To do so, click the Edit menu, select New, and then click DWORD (32-bit) Value.
Type DisallowRun and press ↵ Enter. Doing so renames your DWORD value as "DisallowRun".
Double-click DisallowRun. This will open the "DisallowRun" value.
Change the "DisallowRun" value to "1". Type 1 into the "Value data" field, then click OK.
Select the "Explorer" folder again. Click this folder in the left-hand column again.
Create a new key inside the folder. Click Edit, select New, and click Key.
Type DisallowRun and press ↵ Enter. This creates a new folder inside of the "Explorer" folder titled "DisallowRun".
Blocking Programs
Select the "DisallowRun" folder. Click this folder below the "Explorer" folder on the left side of the window.
Create a new string value. Click Edit, select New, and click String Value.
Type 1 and press ↵ Enter. This will name your string value "1".
Open the string value. Double-click the 1 string value to open it.
Enter your application's name. Click the "Value data" field, then type in the name and extension of the application that you checked in part one. For example, to block Notepad, you would type in notepad.exe here.
Click OK. Doing so saves your string value. This string value will prevent the specified program from being opened. If you want to add subsequent string values for other programs, name them in numerical order (e.g., "2", "3", "4", etc.).
Close the Registry Editor. At this point, you should no longer be able to open the program, but you may need to restart your computer before these changes take effect.
Comments
0 comment