A computer used by multiple users will always require some restrictions for better use. Some applications may not be suitable for kids or you may not want to share with other users. In certain situations, you might want to restrict some of the programs on your computer. The reason can be privacy-related for the users or to be safe from issues caused by misuse of the programs. In this article, we will show you methods through which you can prevent users from running specified applications.

How to Prevent Users from Running Specified Windows Applications? - 1

Preventing users from opening Windows applications

Note : Make sure that you are making changes to the user account in which you want to restrict programs and not in the administrator account. If you are making changes in the administrator account, then make sure tools like Registry Editor and Local Group Policy Editor isn’t restricted. That is because you will lock yourself up and lose access to reversing the changes.

Preventing Users from Running Certain Programs

Most of you may already know about the third-party applications that lock certain applications and folders. However, this can also be done through the tools already available in the Windows operating system. There is a policy setting, especially for this specific task in the Group Policy Editor. You can also use the Registry Editor and restrict applications from the standard users.

Method 1: Using the Local Group Policy Editor

The Local Group Policy Editor is a Windows administration tool that allows users to configure settings for their operating system. It has two categories; computer configuration and user configuration. The setting that we will be using in this method can be found in the user configuration category. Follow the below guide to restrict applications for the standard user.

However, if you are using the Windows Home operating system, then skip this method and try other methods below. That is because the Group Policy Editor isn’t available in the Windows Home Edition.

  1. Hold the Windows key and press R on your keyboard to open a Run dialog. Type “ gpedit.msc ” in the text field of the Run box and press the Enter key to open the Local Group Policy Editor . Opening Local Group Policy Editor
  2. Expand the User Configuration and navigate to the following path: User Configuration\Administrative Templates\System\ Navigating to the setting
  3. Double-click on the “ Don’t run specified Windows applications ” setting and it will open in another window. Change the toggle option to Enabled and click on the Show button. Enabling the setting
  4. Now add programs executable names in the list as shown in the screenshot. Adding programs executable names
  5. Click on the Apply/Ok button to save changes and it will block the programs that you added to the list.
  6. To enable those programs back, simply change the toggle option back to Not Configured or Disabled .

Method 2: Using the Registry Editor

The Registry Editor is a graphical tool that the authorized users can use to view and makes changes in the Windows registry. It contains almost all of the information about the computer. In this method, the user will have to create missing keys and values for the setting to work. We also recommend users, always create a backup of the registry before making any changes. Check the below steps and apply them to restrict applications for the standard user.

  1. Hold the Windows key and press R on your keyboard to open a Run dialog. Type “ regedit ” in the text field of the Run box and press the Enter key to open Registry Editor . If prompted by UAC (User Account Control), then click on the Yes button. Opening the Registry Editor
  2. In the Registry Editor, navigate to the following key path: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  3. Create a new value under the Explorer key by right-clicking on the right pane and choosing New > DWORD (32-bit) Value . Name this value as “ DisallowRun “. Creating a new value
  4. Double-click on the DisallowRun value and set the value data as 1 . Enabling the value
  5. Now create another key under the Explorer key by right-clicking on it and choosing the New > Key option. Name this key as “ DisallowRun “. Creating a new key
  6. Inside this key create a new value by right-clicking on the right pane and choosing New > String Value . You can name the values in numerical form, starting from 1 . Note : The second value will have the name as 2 , the third value will have like 3 , and so on. Creating values for programs
  7. Open the value 1 and add the string value as the executable name of the program. In our case, we are blocking the notepad, so we type “ notepad.exe ” in it. Adding the executable names of programs in each value
  8. Finally, after configuring all the settings, make sure to restart your system to apply the changes.
  9. To enable the programs back on your system, you need to remove the executable names in string values or delete the values from the Registry.

Method 3: Using the Program Blocker

There are many third-party programs on the Internet that you can use to restrict applications. They will simply lock the applications and password-protect them. Every program blocker will have a different feature and working. We will be using Program Blocker software in this method to demonstrate the idea of how it works. Check the below guide:

  1. Open your browser and download the Program Blocker . Open the program by using the WinRAR program. At first, it will ask you to create a new password for the Program Blocker. Downloading the application
  2. After that, click on the Block Applications button on the Program Blocker. Clicking on the Block Applications button
  3. Search for the application that you want to block in the Common Applications list. You can also find the executable of the program that you want to block by clicking on the Add New button.
  4. Once selected, click on the Arrow button to move it to the right box, and then click on the Save button to save the changes. Blocking the selected programs
  5. This will restrict the application from the users and can only be opened by providing the password that you set for the Program Blocker.
  6. To unblock the application, simply open the Program Blocker and click on the Block Applications button. Now select the application and click on the Remove button.

How to Fix “Printer is in an error state” Issue?

The “ Cannot change fingerprint or PIN ” problem in Windows 11 happens when the options to change these settings are greyed out in Settings → Accounts → Sign-in options. Even if you are the administrator, you can’t update your Windows Hello credentials. You might also see a message like “ This option is temporarily unavailable. ”

How to Prevent Users from Running Specified Windows Applications? - 2

Can’t disable PIN or Fingerprint on Windows 11

This usually happens because Windows Hello’s stored data (in the Ngc folder) is damaged or not in sync. Other reasons include security rules set by your workplace or school, connected work accounts, or restrictions set in the registry or group policy.

Now that you’re aware of the potential causes, let’s go through some steps that have helped other users fix or work around this problem:

1. Change the PIN or Fingerprint the Conventional Way

If your goal is to remove the fingerprint or PIN without setting up another sign-in method, please note that this is not possible on Windows 11.

Windows 11 requires you to have at least one Sign-in option enabled. The Remove button will remain grayed out if you only have one active sign-in method.

How to Prevent Users from Running Specified Windows Applications? - 3

Can’t disable PIN or Fingerprint on Windows 11

For example, the Remove button for your PIN will stay unavailable until you add a different sign-in option (like Facial Recognition, Fingerprint, or a Security Key).

If you want to stop using your PIN or Fingerprint, you’ll need to set up an additional way to sign in.

Below are step-by-step instructions to set up a new sign-in option and then remove your current one:

  1. Press Windows key + I to open the Settings menu in Windows 11.
  2. Inside the Settings menu, click on Accounts from the vertical menu on the left. Accessing the Accounts menu Note: If the left menu is hidden by default, click the menu button (top-left corner) to reveal it.
  3. Once in the Accounts menu, move to the right-hand section of the screen and select Sign-in options. Accessing the Sign In Options menu
  4. Now, choose which sign-in method you’d like to set as a fallback. Sign-in Options Note: Your available options depend on your device. If your PC doesn’t support facial recognition or you don’t have a security key, you can switch between PIN and fingerprint.
  5. After you pick your new sign-in method, follow the on-screen instructions to set it up.
  6. Once your second sign-in option is set, you’ll be able to click the Remove button to get rid of your previous sign-in method. You can also choose Change PIN or Change Fingerprint to update, rather than remove, your sign-in credentials. Modify the current PIN or remove one of the configured sign-in options

2. Remove PIN or Fingerprint Requirement by Using a Local Account

If you want to completely remove all sign-in options like PIN or Fingerprint, you will have to switch to a local account .

We generally don’t recommend this unless you really need to, as it can limit the functionality of some built-in Windows features (like Windows Update and the Microsoft Store).

If you still want to remove your PIN or Fingerprint sign-in, you’ll need to set up a local account with a password instead. Keep in mind, this means you’ll need to stop using your Microsoft account on your PC.

Important: This method isn’t available if you’re enrolled in the Windows Insider program.

To change from a Microsoft account with PIN or fingerprint to a local password, follow these steps:

  1. Press Windows + I to open the Settings menu in Windows 11.
  2. In the Settings menu, click on Accounts from the menu on the left. Accessing the Accounts menu Note: If you don’t see the left menu, click the menu icon (top-left corner).
  3. Inside Accounts , click on Family & other users on the right-hand side. Accessing the Family and other users tab
  4. In the Family & other users tab, check for any accounts listed under Other users. If you find any, remove them before moving on.
  5. Next, return to the main Accounts menu and click on Your info on the right. Accessing the Your Info tab
  6. Scroll down to Account Settings and click on Sign in with a local account instead . Sign in with a local account instead
  7. On the next screen, click Next .
  8. When prompted, enter your current PIN or use your fingerprint as requested. Inserting the PIN
  9. Then, you’ll be asked to create a username and password for your new local account, along with a password hint in case you forget. Configure the local account
  10. Finally, click Sign out and finish to complete the switch.