Here’s how to do it.
Right-click thePolicieskey, choose New > Key, and then name the new keyExplorer.
Next you’re going to create a value inside the newExplorerkey.
Right-click theExplorerkey and choose New > DWORD (32-bit) value.
Name the new valueDisallowRun.
Double-tap the newDisallowRunvalue to open its properties dialog.
You’ll do this by creating a new string value inside theDisallowRunkey for each app you want to block.
Right-click theDisallowRunvalue and then choose New > String Value.
Next you’re going to create a value inside the newExplorerkey.
Right-click theExplorerkey and choose New > DWORD (32-bit) value.
Name the new valueRestrictRun.
Double-hit the newRestrictRunvalue to open its properties dialog.
Create a new string value inside theRestrictRunkey for each app you want to block.
Right-click theRestrictRunvalue and then choose New > String Value.
When you’re done, restart Windows, log into that user account again, and test your options.
You should only be able to run apps to which you explicitly allowed access.
you might read all about that in ourguide to applying local Group Policy tweaks to specific users.
Instead of launching the app, you should see an issue notification.
This will turn the setting off entirely.
