There are two options to prevent an application from running on Windows computers:
using the Shell-CommandPrompt-RegEditTools.admx group policy template to create a policy to block applications.
To do that
- Open the Desktop Authority Console
- Navigate the Client Configuration | User | Profiles | and select the profile to be used for the new element.
- Create a new Group Policy Template Element
- Click on "Add/Remove ADMX Files"
- Locate the Shell-CommandPrompt-RegEditTools.admx
- click on Settings again.
- Browse to Templates | Administrative Templates | System
- Select the "Don't run specified Windows applications"
- Click "Edit" and change the policy state to Enabled and fill the List of Disallowed Applications with your applications to be blocked. Type the application name (without the path) and click on the add icon (green cross).
- Once all applications are added, click "Confirm" select the desired validation logic, click Save and replicate the changes.
- On the next logon those applications will be blocked.
Also notice that this can be done using Register elements, one element for the Policy state:
Create value:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
DisallowRun REG_DWORD 1
Create key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun
Create new values for every application:
1 REG_SZ notepad.exe
2 REG_SZ regedit.exe
and so on.