Block a program from running

Question

4.00/5 (1 vote)

See more:

Hello!

I would like to block some of my programs from running on a guest account. So when the user wants to start the application it throws an error. Is there a way to do that? And if yes, can the user get around this somehow?

Posted 1-Jun-11 4:35am

velvet7

Add a Solution

Comments

[no name] 1-Jun-11 10:58am

Is the application you want to block yours or a 3rd party app?

velvet7 1-Jun-11 11:14am

It is 3rd party app.

2 solutions

Add a Solution

Add your solution here

Treat my content as plain text, not as HTML

Preview 0

…

Existing Members

Sign in to your account

...or Join us

Download, Vote, Comment, Publish.

Your Email
Password
Forgot your password?

Your Email
This email is in use. Do you need your password?
Optional Password

I have read and agree to the Terms of Service and Privacy Policy
Please subscribe me to the CodeProject newsletters

When answering a question please:

Read the question carefully.
Understand that English isn't everyone's first language so be lenient of bad spelling and grammar.
If a question is poorly phrased then either ask for clarification, ignore it, or edit the question and fix the problem. Insults are not welcome.
Don't tell someone to read the manual. Chances are they have and don't get it. Provide an answer or move on to the next question.

Let's work to help developers, not make them feel stupid.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)

Sergey Alexandrovich Kryukov · Answer 1 · 2011-06-01T10:43:00

The simplest way to do that is to make the file (or the application executable directory) invisible for the guest account. Just use the file (directory) Properties with the shell, => "Security" tab and deny all access. You can also allow access for selected groups, say "Administator" and "Power Users" and deny for anyone else. Read Microsoft help on security for more information.

Work-around with the copy will not work in this case. Denied users won't access anything in first place.

Any questions?

—SA

Dave Kreskowiak · Answer 2 · 2011-06-01T06:29:00

Solution 1

The only way to do that is by Group Policy. ...and the user can get around it if they know what they're doing.

GPEDIT.MSC -> User Configuration -> Administrative Templates -> System, look for "Don't run specified Windows applications" and for better control "Run only specified Windows applications".

There is no guaranteed 100% fool proof method of stopping an app from running.

Posted 1-Jun-11 6:29am

Dave Kreskowiak

Comments

velvet7 1-Jun-11 12:32pm

Thank you for the answer. And what programs could get around this kind of security?

Dave Kreskowiak 1-Jun-11 13:33pm

You don't need any. All you have to do is rename the .EXE or make a copy of it (with a different file name) and run the copy.

velvet7 1-Jun-11 13:38pm

Then this isn't what I am looking for I am afraid :( It's too easy for them.

Dave Kreskowiak 1-Jun-11 18:05pm

The real solution is to not use Guest accounts and setup proper security acrossed everything, allowing access to only the things the account requires, including the filesystem folders.