Allow Windows to Run Specified Programs Only

[@sinusjz]

Thanks for your solution, but you SHOULD HAVE mentioned that it's NECESSARY to add MMC.EXE to the list so it can be changed/edited later. *** HOW TO UNDO *** If you're using Windows 10 follow these steps: 1. go to Settings, Update & Security, Recovery and choose "Restart now" under Advanced startup. 2. choose Troubleshooting > Advanced startup > Restart 3. after restart choose "6. Safe mode with command prompt" 4. when windows loaded and cmd page appeared, type "regedit" without quotes and hit enter. 5. go to the following: "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" 6. on the right pane select “RestrictRun” and change the Dword value from “1” to “0”. 7. restart your PC. now you can open Group Policy again and disable/edit the "Run only specified Windows applications" rule. if you add MMC.EXE to the list you'll be always enable to edit the rule later. make sure to change the “RestrictRun” value back to 1 when you're finished.

[@BrainBitesVlogs]

Can’t get back, have added gpedit.msc but unable to open it too. Please help

[@tmarius1233]

thanks man you saved me

[@viraltrendz1991]

Thank you so much!!! You gave me medicine to my head ache for half day😂😂😂

[@michaelklepacki3028]

Does the Administrator still have access to make changes, or does it also lock the administrator account?

[@ComptGeorges]

Hi Brian, great video. I have a question. Is it possible to chose a specific user to apply this rule, instead of restricting the user account that we are already using at the moment? Or I would need to login with the user that I want to restrict, then log out and log in again with the Admin user. Much thanks, cheers

[@amrbadry876]

I forget

[@selva8651]

First think (Most Important) u can add mmc.exe , cmd.exe , regedt32.exe . after that u can changed enabled or disabled that policy ..

[@LiamGutierrez]

Very detailed and good how-to but I prefer Voodoo Shield which you demonstrated in an earlier video. I use the beta version and it works fine. Yes, it asks every time whether to allow to run a new process but once allowed it doesn't nag you anymore. BTW it also checks processes for malware, so really not bad. The method to restrict programs on this video is very good if you need to control a bunch of PCs or your kids' ones. Looking forward to your next tutorial. Very clear, concise and focused.

[@Britec09]

Liam Gutierrez Voodoo Shield is something totally different to what I would use this for.

[@afonsoarchilla1959]

Really nice! A question: - It's possible do the oposite? Just eliminate some programs to run? Tnx in advance

[@andzapilado5908]

I did this on my main user, now I got lock out except for the 2 app I allowed. I already restart my PC so I can't access the edit group policy. How do you I revert everything back? Need help please

[@andzapilado5908]

Even my command prompt, is not working. Really need help on this one.

[@sahunwin]

Thanks for the video, I tried this at my school and it appears to work. Although, I notice anything on the start menu will run. Programs such as chrome, Office, and Acrobat didn't run until I added them. Any thoughts?

[@TheGeneraltigre]

I tried your method and worked fine, however, I locked me out of the option to come back to the initial group policy window. Do I need to add the GPEDIT.MSC too to avoid the issue? Thanks

[@charlesjsescoto]

He's scammer😂

[@Ajanth988]

Are you still facing the problem? There is a way to fix it.

[@spangliard]

@@Ajanth988 I am, help lol

[@Ajanth988]

@@spangliard 1. Open a command prompt at boot in Vista or Windows 7 or win 8 (U must hav a win installation disk) 2. In the command prompt, type diskpart, and press Enter. 3. In the command prompt, type list volume, and press Enter. 4. Make note of what your Windows OS drive letter is. It is not always C: at boot. 5. In the command prompt, type exit, and press Enter. 6. In the command prompt, type the command below, and press Enter. RD /S /Q "C:\Windows\System32\GroupPolicy" 7. In the command prompt, type the command below, and press Enter. RD /S /Q "C:\Windows\System32\GroupPolicyUsers" 8. Restart the computer back into Windows. 9. The Local Group Policy Editor has now been reset back to default. That's it, Ajanth

[@snipegirl111]

Remember to add MMC.exe so you can restore it later

[@Howthingslooklike]

You are genius :D I learned so much of your videos. BIG Thanks!!!

[@AlkoonSofts]

First of all *YouAre Legend* , second this is run on Windows 7 too

[@Jeanftech]

Hey can u help me .I set this and I don't know how to exit

[@Sid-Cannon]

Nice video Brian, when you set these restrictions is it globally or per user.

[@Britec09]

Sid Cannon Cheers Sid, user.

[@Sid-Cannon]

Thanks Brian :)

[@fixitdaz]

great video Bri, sum good info.

[@Britec09]

fixitdaz Thanks Daz

[@Zendukai]

Is there an update to this Brian for windows 10 pro, just a thought, if we don't allow gpedit, how do we unlock windows, just a silly question.

[@chanwei21]

Hi, what are the common application should run in a windows 10 pro to avoid system errors before I add my specific app.exe. thank you.

[@confusedprogrammer3951]

is it possible to run a specific programme automatically when I open my computer. Speacially in point of sale computer__

[@learnwithsid2044]

if I have administrative right but I want to block installing any software .. later I can unblock and can install. is this possible ?

[@xedo2740]

can we do this for specified user account only plz help

[@itexpert3261]

yes you can do this for specified user but in domain environment its very easy to set policy on specified user but on local policy you have to select that specified user from mmc 1st

[@rninfra6442]

you are truly a legend

[@charlesjsescoto]

I liked it sir, BUT next time u should EMPHASIZE that when u exit gpedit.msc, u cant turn it BACK!!!

[@dn1969]

You can always backup your reg by exporting to your desk prior making changes

[@charlesjsescoto]

@@dn1969 its to late i burnt my pc😂

[@dn1969]

@@charlesjsescoto LOL.

[@charlesjsescoto]

@@dn1969 actually the back up u are talking is also impossible, there is consent.exe which means when u export that there pop up yes/no which is u can't do,BECAUSE everything is blocked

[@kirmizisaclim2008]

Thank you for this great video! I do use Acellus internet school to teach my 2 kids and I would like them to use only Acellus app to learn not to go anywhere else. Can I do this without crashing my windows 10 pro laptop? Thank you so much!

[@md.rakibhossen2714]

After enabled this option, I can't open the gpedit.msc too. 😥😭 Bro, what should I do now??

[@sidahmedboudoumi5043]

Have you found any solution?

[@md.rakibhossen2714]

Sid Ahmed BOUDOUMI No bro, I think I've to reinstall Windows.

[@sidahmedboudoumi5043]

@@md.rakibhossen2714 * HOW TO UNDO * If you're using Windows 10 follow these steps: 1. go to Settings, Update & Security, Recovery and choose "Restart now" under Advanced startup. 2. choose Troubleshooting > Advanced startup > Restart 3. after restart choose "6. Safe mode with command prompt" 4. when windows loaded and cmd page appeared, type "regedit" without quotes and hit enter. 5. go to the following: "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" 6. on the right pane select “RestrictRun” and change the Dword value from “1” to “0”. 7. restart your PC. now you can open Group Policy again and disable/edit the "Run only specified Windows applications" rule. if you add MMC.EXE to the list you'll be always enable to edit the rule later. make sure to change the “RestrictRun” value back to 1 when you're finished.

[@md.rakibhossen2714]

Sid Ahmed BOUDOUMI thank u very much bro, I will try this method tomorrow. And bro, can I knock u later if I face any problem?

[@sidahmedboudoumi5043]

@@md.rakibhossen2714 Yes of course, I managed to remove gpedit with this method

[@shae4362]

How do you disable/take it off?

[@MitchHaman]

Nice video Brian. Thank you.

[@FilmUsMediaGroup]

Hi I need your help, I didn't think to put gpedit.msc in the list and now it won't open. How can I access it now to make changes again?

[@charlesjsescoto]

Same concern, did u fix it?

[@TimsComputerRepair]

Very useful information. Nice video!

[@Britec09]

TimsComputerRepair Cheers Tim, just some basic stuff.

[@neilbadenhorst8031]

Hi, I made two admin users. Then did this for one of them. It pulled through to the other one as well. How do I do this for only one user ?

[@MrNathan232]

Great video Brian if i would have done the same exact thing you did Brian, and then accidentally close down the group policies editor how would i ever go back to it or do other stuff like do a system restore to an earlier time because everything would be locked down.

[@Britec09]

Nathan T This would be setup server side.

[@MrNathan232]

Thank you your awesome!

[@alexyt]

Is there an alternative free software for the same use? for win 7 without policy .....

[@zamanraza9635]

Hey bro .I have configured this policy on my machine .and now I want to remove this policy but when I open anything it says blocked program. Contact your administrator even I am logged in as administrator.. what's the problem?

[@RaidenB]

Anyway do to this JUST for a secondary account? On my Win 10 Pro laptop I've got my Admin account and a standard user account for my mother. She only needs a web browser, file explorer for her files, itunes & the anti-malware programs I have installed. I would like to restrict that account's program access without restricting my Admin account as well, is that possible?

[@Britec09]

Raiden Raccoon Post on my forum for help and support.

[@marco_evertus]

Nice video Brian, although I would think most people already know about it.

[@Britec09]

rounak dutta Thanks.

[@kas00000000]

this is only apply to standard user or both administrator user?

[@Nightwish-me8fx]

Don't do this because once you restrict those file the gpedit.msc will not accessable. This tricks bring your head ache.

[@eswarivino6018]

Can this can make app to run faster

[@kaidjohardudhiawala2549]

Superb explanation

[@fernandooliver7005]

but this is for everyone on that pc, but what about for some users?, i want to put X PC on a place that will run only one homemade app, but me as an administrator dont want to be blocked too.

[@MaruJer]

i restarted my pc after that and now i can't even open gpedit

[@srimanichandanamadipalli9068]

How to disable this to allow all programs to get run?

[@chengyulee4332]

If I set this all app can't open but I want to diseaper how to do

[@chemikbbmati]

Can you help me? I set on gpedit.msc run only acad.exe. When i accep Settings and click ok i can’t open again gpedit.msc when i’m trying open gpedit i see same prohibition communicate.

[@anthonytamburro7071]

is that the same if your doing it on the server 2012 to allow specific programs for users

[@veshahid]

i make allow only chrome . and close it .. now i cant undo . how to disable this feature .

[@BroCodeV3_Techz]

Unable to group policy after doing this method

[@tommygun5.3]

This bricked my computer. Lost all administrative functions, can't run programs, and can't factory reset.

[@jemrinsonpurba7474]

sir i have problem cant open date and time on control panel how to fix it? please

[@tripstan8876]

Is there a way to make this user specific?

[@moviesmasti5129]

How to allows only ms office Msoffice.exe type now but not working commands please tell me

[@mwaygp]

Heuy I accidentally locked everything how can I reaccess group policy editor??

[@norafguriye9611]

did you find any solutions for that, coz i'm suffering too

[@md.rakibhossen2714]

Nor Afguriye I am suffering too bro, do you have any solution?

[@IllusionSector]

*All right, Britec09. Couple of things:* *1)* The fact that _gpedit.msc_ is only available in Pro or higher editions of the OS should be stated loud and clear in the *title* of the video, not 3/4 minutes into it! This must be the 5th or 6th KZbin tutorial on the subject matter that I'm having to chastise with this comment! This is what clickbaters do! I'm not necessarily accusing you of being one, but I'd be forgiven if I did. *2)* From the looks of it, you're white-listing executables by *name* and not specific *file hash,* which is pretty much pointless. What if your grandma is tricked into running a virus also called _notepad.exe_ or _vlc.exe_ ? Ever thought about that? *3)* What if you want to apply these restrictions to just a specific account and not to the admin account? *4)* Lastly, my reason for using GPE is to shield our grandma from the troubled cyber-waters. If you have a different application in mind, such as setting up an employee workstation or some sort of kiosk, what's to keep a geeky enough user from undoing those policy settings? This is the most pointless tutorial ever.

[@aniketverma6489]

I have enabled the option run only specified windows application and allowed only one file then closed the local group policy editor window.N ow I am not able to open anything not even cmd and control panel options.I need help.Please help... Please

[@norafguriye9611]

Aniket did you find any solutions for this

[@johnborg5245]

Hi Dave,great video like always,can please do a video about lock up all the private for privates and what they do there a lot people don't like this,now window are spying on us I hope not. Thanks.

[@Britec09]

John borg I see what I can do.

[@eyevenear]

editing the group policy is playing with fire, this in particular makes the computer UNUSABLE if you're not experienced. Always create a restore point before doing anything like this. BTW if you got locked out scroll in the comments there is one fix that works (check the HOW TO UNDO comment)

[@Jeanftech]

How ?

[@zulkarnainkarim]

i want only to do this on guest account.. how to do that?

[@PrimoKadro80s]

Great job 👍

[@grantfullen9559]

Good info Brian

[@Britec09]

Grant Fullen Cheers Grant.

[@chengyulee4332]

Now I can open any app how to I disable this thing

[@jimmyitwv]

You may want to add that this only works for computers that use group policy. By default this will not working in Home Editions of Windows.

[@kayadebiyi]

Great video.

[@wasikyaseen6739]

My PC is showing you do not have permission to perform this action.plz help me plz

[@o0mohamedahmed]

thnx a lot really you are awesome

[@rameshkaneria7643]

Please Help me I can open only notepad.exe then close gpedit.msc right now I can not open gpedit.msc as well as CMD . So what I can do now . Please please Help me. please reply fast.

[@charlesjsescoto]

Same, did u fix it??

[@rameshkaneria7643]

@@charlesjsescoto No I format my windows

[@charlesjsescoto]

@@rameshkaneria7643 i found something different way to fix this problem, gl to u man, ty anyways

[@DexterKDC]

Can i lock for non admin user and not the administrator?

[@Britec09]

Dex does Computers I try and make another video showing you other ways.

[@samuelmurmu3163]

The problem i'm now facing is i'm unable to disable it, as i didn't put it under the category. Can anyone please help me out with it.

[@Ajanth988]

There is a way.. are you still facing problem?

[@samuelmurmu3163]

@@Ajanth988 I've find a solution, thank you bro

[@saidurgaprasadkarri5092]

Can u please tell me how to disable it

[@vasilisnikitaras]

Amazing

[@KeithGadget]

A fine way to potentially destroy the operating system. A video on how to turn your computer into a door stop.

[@abdraoufx]

Cool I thought you only do this with domain controller.

[@jimdayton8837]

Will this work on Windows XP?

[@ZdrmonsterProductions]

yes

[@ds2kx]

Bad option to restrict program. Too easy to bypass it: copy your exécutable and rename it with an authorized name. Use another method to restrict program, applocker or SRP is much better and verify hash of file that you want run ;)

[@roboforce4397]

How to open when gpedit and registry blocked

[@Ajanth988]

Are you still facing the problem? There is a way to fix it.

[@user-peebutt]

​@@Ajanth988 TELL ME

[@user-peebutt]

​@@Ajanth988 TELL ME

[@mdehaab]

My even one app is not opening what is this

[@umarsharif8471]

Please man tell me how to Disable it Please..

[@maduranga1867]

how to reset this

[@f23948]

that's cool! too bad i don't have pro version

[@Britec09]

***** Yeah that's just the way Microsoft made it.

[@Sweden-mb8vz]

This can be dangerous to say the least

[@selva8651]

Sweden ...first think (Most Important) u can add mmc.exe , cmd.exe , regedt32.exe . after that u can changed enabled or disabled that policy ..

[@teodenfluksi3959]

I need helpp helpppppp i locked down my computer 😭😭😭😭😭

[@zx8401ztv]

No i would not like to restrict users lol :-D You evil man LOL :-D just leg pulleth :)

[@Britec09]

zx8401ztv lol

[@akhdilma]

Dear sir, 1) how to prevent saving any files in windows 7 only in ( USB) ? 2) how to hide or prevent access to my Documents / Music / Pictures / Videos in windows explorer ? 3) how to prevent access to Personalization ? please i want you to teach me how to do that its really important to me . And send me the information to my email or share a video about it thanks ...

[@chetanrustagi194]

HOW TO CHANGE COMMENTS

[@cokefloat18]

this is tiresome, takes a lot of time.

[@mach1553]

How do you undo this? 👉I figured it out ……………… just click on "Not Configured" radio button ⭕

[@Ifalvarado]

Less complicated than applocker. Seriously.

[@mwaygp]

Britec09 let me know asap please

[@learnwithsid2044]

hello sir

[@charmknight7171]

frankie

[@randomname1829]

1:25. Thank me later...