Don't run specified Windows applications

Prevents Windows from running the programs you specify in this setting.

If you enable this setting, users cannot run programs that you add to the list of disallowed applications.

This setting only prevents users from running programs that are started by the Windows Explorer process. It does not prevent users from running programs, such as Task Manager, that are started by the system process or by other processes. Also, if you permit users to gain access to the command prompt, Cmd.exe, this setting does not prevent them from starting programs in the command window that they are not permitted to start by using Windows Explorer. Note: To create a list of disallowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe).

Supported on: At least Windows 2000

Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer
Value NameDisallowRun
Value TypeREG_DWORD
Enabled Value1
Disabled Value0

List of disallowed applications

Registry HiveHKEY_CURRENT_USER
Registry PathSoftware\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
Value Name{number}
Value TypeREG_SZ
Default Value

shell-commandprompt-regedittools.admx

Administrative Templates (Computers)

Administrative Templates (Users)