Thanks for your solution, but you SHOULD HAVE mentioned that it's NECESSARY to add MMC.EXE to the list so it can be changed/edited later. *** HOW TO UNDO *** If you're using Windows 10 follow these steps: 1. go to Settings, Update & Security, Recovery and choose "Restart now" under Advanced startup. 2. choose Troubleshooting > Advanced startup > Restart 3. after restart choose "6. Safe mode with command prompt" 4. when windows loaded and cmd page appeared, type "regedit" without quotes and hit enter. 5. go to the following: "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" 6. on the right pane select “RestrictRun” and change the Dword value from “1” to “0”. 7. restart your PC. now you can open Group Policy again and disable/edit the "Run only specified Windows applications" rule. if you add MMC.EXE to the list you'll be always enable to edit the rule later. make sure to change the “RestrictRun” value back to 1 when you're finished.
Hi Brian, great video. I have a question. Is it possible to chose a specific user to apply this rule, instead of restricting the user account that we are already using at the moment? Or I would need to login with the user that I want to restrict, then log out and log in again with the Admin user. Much thanks, cheers
Very detailed and good how-to but I prefer Voodoo Shield which you demonstrated in an earlier video. I use the beta version and it works fine. Yes, it asks every time whether to allow to run a new process but once allowed it doesn't nag you anymore. BTW it also checks processes for malware, so really not bad. The method to restrict programs on this video is very good if you need to control a bunch of PCs or your kids' ones. Looking forward to your next tutorial. Very clear, concise and focused.
Thanks for the video, I tried this at my school and it appears to work. Although, I notice anything on the start menu will run. Programs such as chrome, Office, and Acrobat didn't run until I added them. Any thoughts?
I did this on my main user, now I got lock out except for the 2 app I allowed. I already restart my PC so I can't access the edit group policy. How do you I revert everything back? Need help please
@@dn1969 actually the back up u are talking is also impossible, there is consent.exe which means when u export that there pop up yes/no which is u can't do,BECAUSE everything is blocked
I tried your method and worked fine, however, I locked me out of the option to come back to the initial group policy window. Do I need to add the GPEDIT.MSC too to avoid the issue? Thanks
@@spangliard 1. Open a command prompt at boot in Vista or Windows 7 or win 8 (U must hav a win installation disk) 2. In the command prompt, type diskpart, and press Enter. 3. In the command prompt, type list volume, and press Enter. 4. Make note of what your Windows OS drive letter is. It is not always C: at boot. 5. In the command prompt, type exit, and press Enter. 6. In the command prompt, type the command below, and press Enter. RD /S /Q "C:\Windows\System32\GroupPolicy" 7. In the command prompt, type the command below, and press Enter. RD /S /Q "C:\Windows\System32\GroupPolicyUsers" 8. Restart the computer back into Windows. 9. The Local Group Policy Editor has now been reset back to default. That's it, Ajanth
yes you can do this for specified user but in domain environment its very easy to set policy on specified user but on local policy you have to select that specified user from mmc 1st
Thank you for this great video! I do use Acellus internet school to teach my 2 kids and I would like them to use only Acellus app to learn not to go anywhere else. Can I do this without crashing my windows 10 pro laptop? Thank you so much!
Great video Brian if i would have done the same exact thing you did Brian, and then accidentally close down the group policies editor how would i ever go back to it or do other stuff like do a system restore to an earlier time because everything would be locked down.
Anyway do to this JUST for a secondary account? On my Win 10 Pro laptop I've got my Admin account and a standard user account for my mother. She only needs a web browser, file explorer for her files, itunes & the anti-malware programs I have installed. I would like to restrict that account's program access without restricting my Admin account as well, is that possible?
*All right, Britec09. Couple of things:* *1)* The fact that _gpedit.msc_ is only available in Pro or higher editions of the OS should be stated loud and clear in the *title* of the video, not 3/4 minutes into it! This must be the 5th or 6th RUclips tutorial on the subject matter that I'm having to chastise with this comment! This is what clickbaters do! I'm not necessarily accusing you of being one, but I'd be forgiven if I did. *2)* From the looks of it, you're white-listing executables by *name* and not specific *file hash,* which is pretty much pointless. What if your grandma is tricked into running a virus also called _notepad.exe_ or _vlc.exe_ ? Ever thought about that? *3)* What if you want to apply these restrictions to just a specific account and not to the admin account? *4)* Lastly, my reason for using GPE is to shield our grandma from the troubled cyber-waters. If you have a different application in mind, such as setting up an employee workstation or some sort of kiosk, what's to keep a geeky enough user from undoing those policy settings? This is the most pointless tutorial ever.
editing the group policy is playing with fire, this in particular makes the computer UNUSABLE if you're not experienced. Always create a restore point before doing anything like this. BTW if you got locked out scroll in the comments there is one fix that works (check the HOW TO UNDO comment)
@@md.rakibhossen2714 * HOW TO UNDO * If you're using Windows 10 follow these steps: 1. go to Settings, Update & Security, Recovery and choose "Restart now" under Advanced startup. 2. choose Troubleshooting > Advanced startup > Restart 3. after restart choose "6. Safe mode with command prompt" 4. when windows loaded and cmd page appeared, type "regedit" without quotes and hit enter. 5. go to the following: "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" 6. on the right pane select “RestrictRun” and change the Dword value from “1” to “0”. 7. restart your PC. now you can open Group Policy again and disable/edit the "Run only specified Windows applications" rule. if you add MMC.EXE to the list you'll be always enable to edit the rule later. make sure to change the “RestrictRun” value back to 1 when you're finished.
but this is for everyone on that pc, but what about for some users?, i want to put X PC on a place that will run only one homemade app, but me as an administrator dont want to be blocked too.
Hey bro .I have configured this policy on my machine .and now I want to remove this policy but when I open anything it says blocked program. Contact your administrator even I am logged in as administrator.. what's the problem?
Hi Dave,great video like always,can please do a video about lock up all the private for privates and what they do there a lot people don't like this,now window are spying on us I hope not. Thanks.
Can you help me? I set on gpedit.msc run only acad.exe. When i accep Settings and click ok i can’t open again gpedit.msc when i’m trying open gpedit i see same prohibition communicate.
I have enabled the option run only specified windows application and allowed only one file then closed the local group policy editor window.N ow I am not able to open anything not even cmd and control panel options.I need help.Please help... Please
Bad option to restrict program. Too easy to bypass it: copy your exécutable and rename it with an authorized name. Use another method to restrict program, applocker or SRP is much better and verify hash of file that you want run ;)
Please Help me I can open only notepad.exe then close gpedit.msc right now I can not open gpedit.msc as well as CMD . So what I can do now . Please please Help me. please reply fast.
Dear sir, 1) how to prevent saving any files in windows 7 only in ( USB) ? 2) how to hide or prevent access to my Documents / Music / Pictures / Videos in windows explorer ? 3) how to prevent access to Personalization ? please i want you to teach me how to do that its really important to me . And send me the information to my email or share a video about it thanks ...
Thanks for your solution, but you SHOULD HAVE mentioned that it's NECESSARY to add MMC.EXE to the list so it can be changed/edited later.
*** HOW TO UNDO ***
If you're using Windows 10 follow these steps:
1. go to Settings, Update & Security, Recovery and choose "Restart now" under Advanced startup.
2. choose Troubleshooting > Advanced startup > Restart
3. after restart choose "6. Safe mode with command prompt"
4. when windows loaded and cmd page appeared, type "regedit" without quotes and hit enter.
5. go to the following: "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
6. on the right pane select “RestrictRun” and change the Dword value from “1” to “0”.
7. restart your PC.
now you can open Group Policy again and disable/edit the "Run only specified Windows applications" rule.
if you add MMC.EXE to the list you'll be always enable to edit the rule later.
make sure to change the “RestrictRun” value back to 1 when you're finished.
Can’t get back, have added gpedit.msc but unable to open it too. Please help
thanks man you saved me
Thank you so much!!! You gave me medicine to my head ache for half day😂😂😂
Hi Brian, great video.
I have a question. Is it possible to chose a specific user to apply this rule, instead of restricting the user account that we are already using at the moment? Or I would need to login with the user that I want to restrict, then log out and log in again with the Admin user.
Much thanks,
cheers
I forget
Very detailed and good how-to but I prefer Voodoo Shield which you demonstrated in an earlier video. I use the beta version and it works fine. Yes, it asks every time whether to allow to run a new process but once allowed it doesn't nag you anymore. BTW it also checks processes for malware, so really not bad. The method to restrict programs on this video is very good if you need to control a bunch of PCs or your kids' ones.
Looking forward to your next tutorial. Very clear, concise and focused.
Liam Gutierrez Voodoo Shield is something totally different to what I would use this for.
Does the Administrator still have access to make changes, or does it also lock the administrator account?
First think (Most Important) u can add mmc.exe , cmd.exe , regedt32.exe . after that u can changed enabled or disabled that policy ..
Remember to add MMC.exe so you can restore it later
You are genius :D I learned so much of your videos. BIG Thanks!!!
great video Bri, sum good info.
fixitdaz Thanks Daz
Really nice! A question: - It's possible do the oposite? Just eliminate some programs to run? Tnx in advance
Thanks for the video, I tried this at my school and it appears to work. Although, I notice anything on the start menu will run. Programs such as chrome, Office, and Acrobat didn't run until I added them. Any thoughts?
you are truly a legend
Nice video Brian. Thank you.
I did this on my main user, now I got lock out except for the 2 app I allowed. I already restart my PC so I can't access the edit group policy. How do you I revert everything back? Need help please
Even my command prompt, is not working. Really need help on this one.
Nice video Brian, when you set these restrictions is it globally or per user.
Sid Cannon Cheers Sid, user.
Thanks Brian :)
First of all *YouAre Legend* , second this is run on Windows 7 too
I liked it sir, BUT next time u should EMPHASIZE that when u exit gpedit.msc, u cant turn it BACK!!!
You can always backup your reg by exporting to your desk prior making changes
@@dn1969 its to late i burnt my pc😂
@@charlesjsescoto LOL.
@@dn1969 actually the back up u are talking is also impossible, there is consent.exe which means when u export that there pop up yes/no which is u can't do,BECAUSE everything is blocked
Hey can u help me .I set this and I don't know how to exit
Very useful information. Nice video!
TimsComputerRepair Cheers Tim, just some basic stuff.
Don't do this because once you restrict those file the gpedit.msc will not accessable.
This tricks bring your head ache.
How do you disable/take it off?
I tried your method and worked fine, however, I locked me out of the option to come back to the initial group policy window. Do I need to add the GPEDIT.MSC too to avoid the issue? Thanks
He's scammer😂
Are you still facing the problem?
There is a way to fix it.
@@Ajanth988 I am, help lol
@@spangliard
1. Open a command prompt at boot in Vista or Windows 7 or win 8
(U must hav a win installation disk)
2. In the command prompt, type diskpart, and press Enter.
3. In the command prompt, type list volume, and press Enter.
4. Make note of what your Windows OS drive letter is. It is not always C: at boot.
5. In the command prompt, type exit, and press Enter.
6. In the command prompt, type the command below, and press Enter.
RD /S /Q "C:\Windows\System32\GroupPolicy"
7. In the command prompt, type the command below, and press Enter.
RD /S /Q "C:\Windows\System32\GroupPolicyUsers"
8. Restart the computer back into Windows.
9. The Local Group Policy Editor has now been reset back to default.
That's it,
Ajanth
Superb explanation
Nice video Brian, although I would think most people already know about it.
rounak dutta Thanks.
can we do this for specified user account only
plz help
yes you can do this for specified user but in domain environment its very easy to set policy on specified user but on local policy you have to select that specified user from mmc 1st
Hi, what are the common application should run in a windows 10 pro to avoid system errors before I add my specific app.exe. thank you.
Is there an update to this Brian for windows 10 pro, just a thought, if we don't allow gpedit, how do we unlock windows, just a silly question.
is it possible to run a specific programme automatically when I open my computer. Speacially in point of sale computer__
Thank you for this great video! I do use Acellus internet school to teach my 2 kids and I would like them to use only Acellus app to learn not to go anywhere else. Can I do this without crashing my windows 10 pro laptop? Thank you so much!
Great video Brian if i would have done the same exact thing you did Brian, and then accidentally close down the group policies editor how would i ever go back to it or do other stuff like do a system restore to an earlier time because everything would be locked down.
Nathan T This would be setup server side.
Thank you your awesome!
Anyway do to this JUST for a secondary account? On my Win 10 Pro laptop I've got my Admin account and a standard user account for my mother. She only needs a web browser, file explorer for her files, itunes & the anti-malware programs I have installed. I would like to restrict that account's program access without restricting my Admin account as well, is that possible?
Raiden Raccoon Post on my forum for help and support.
*All right, Britec09. Couple of things:*
*1)* The fact that _gpedit.msc_ is only available in Pro or higher editions of the OS should be stated loud and clear in the *title* of the video, not 3/4 minutes into it! This must be the 5th or 6th RUclips tutorial on the subject matter that I'm having to chastise with this comment! This is what clickbaters do! I'm not necessarily accusing you of being one, but I'd be forgiven if I did.
*2)* From the looks of it, you're white-listing executables by *name* and not specific *file hash,* which is pretty much pointless. What if your grandma is tricked into running a virus also called _notepad.exe_ or _vlc.exe_ ? Ever thought about that?
*3)* What if you want to apply these restrictions to just a specific account and not to the admin account?
*4)* Lastly, my reason for using GPE is to shield our grandma from the troubled cyber-waters. If you have a different application in mind, such as setting up an employee workstation or some sort of kiosk, what's to keep a geeky enough user from undoing those policy settings?
This is the most pointless tutorial ever.
i restarted my pc after that and now i can't even open gpedit
Hi, I made two admin users. Then did this for one of them. It pulled through to the other one as well.
How do I do this for only one user ?
Is there an alternative free software for the same use? for win 7 without policy .....
if I have administrative right but I want to block installing any software .. later I can unblock and can install. is this possible ?
Can this can make app to run faster
this is only apply to standard user or both administrator user?
How to disable this to allow all programs to get run?
If I set this all app can't open but I want to diseaper how to do
editing the group policy is playing with fire, this in particular makes the computer UNUSABLE if you're not experienced.
Always create a restore point before doing anything like this.
BTW if you got locked out scroll in the comments there is one fix that works (check the HOW TO UNDO comment)
How ?
Hi I need your help, I didn't think to put gpedit.msc in the list and now it won't open. How can I access it now to make changes again?
Same concern, did u fix it?
Unable to group policy after doing this method
After enabled this option, I can't open the gpedit.msc too. 😥😭
Bro, what should I do now??
Have you found any solution?
Sid Ahmed BOUDOUMI No bro, I think I've to reinstall Windows.
@@md.rakibhossen2714
* HOW TO UNDO *
If you're using Windows 10 follow these steps:
1. go to Settings, Update & Security, Recovery and choose "Restart now" under Advanced startup.
2. choose Troubleshooting > Advanced startup > Restart
3. after restart choose "6. Safe mode with command prompt"
4. when windows loaded and cmd page appeared, type "regedit" without quotes and hit enter.
5. go to the following: "HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
6. on the right pane select “RestrictRun” and change the Dword value from “1” to “0”.
7. restart your PC.
now you can open Group Policy again and disable/edit the "Run only specified Windows applications" rule.
if you add MMC.EXE to the list you'll be always enable to edit the rule later.
make sure to change the “RestrictRun” value back to 1 when you're finished.
Sid Ahmed BOUDOUMI thank u very much bro, I will try this method tomorrow. And bro, can I knock u later if I face any problem?
@@md.rakibhossen2714 Yes of course, I managed to remove gpedit with this method
You may want to add that this only works for computers that use group policy. By default this will not working in Home Editions of Windows.
This bricked my computer. Lost all administrative functions, can't run programs, and can't factory reset.
but this is for everyone on that pc, but what about for some users?, i want to put X PC on a place that will run only one homemade app, but me as an administrator dont want to be blocked too.
is that the same if your doing it on the server 2012 to allow specific programs for users
Good info Brian
Grant Fullen Cheers Grant.
Hey bro .I have configured this policy on my machine .and now I want to remove this policy but when I open anything it says blocked program. Contact your administrator even I am logged in as administrator.. what's the problem?
i make allow only chrome . and close it .. now i cant undo . how to disable this feature .
Is there a way to make this user specific?
Hi Dave,great video like always,can please do a video about lock up all the private for privates and what they do
there a lot people don't like this,now window are spying on us I hope not.
Thanks.
John borg I see what I can do.
sir i have problem
cant open date and time on control panel
how to fix it?
please
Can you help me? I set on gpedit.msc run only acad.exe. When i accep Settings and click ok i can’t open again gpedit.msc when i’m trying open gpedit i see same prohibition communicate.
Heuy I accidentally locked everything how can I reaccess group policy editor??
did you find any solutions for that, coz i'm suffering too
Nor Afguriye I am suffering too bro, do you have any solution?
Now I can open any app how to I disable this thing
Great job 👍
A fine way to potentially destroy the operating system.
A video on how to turn your computer into a door stop.
How to allows only ms office
Msoffice.exe type now but not working commands please tell me
Can u please tell me how to disable it
i want only to do this on guest account.. how to do that?
Great video.
thnx a lot really you are awesome
Can i lock for non admin user and not the administrator?
Dex does Computers I try and make another video showing you other ways.
My PC is showing you do not have permission to perform this action.plz help me plz
I have enabled the option run only specified windows application and allowed only one file then closed the local group policy editor window.N ow I am not able to open anything not even cmd and control panel options.I need help.Please help... Please
Aniket did you find any solutions for this
Bad option to restrict program. Too easy to bypass it: copy your exécutable and rename it with an authorized name. Use another method to restrict program, applocker or SRP is much better and verify hash of file that you want run ;)
how to reset this
My even one app is not opening what is this
The problem i'm now facing is i'm unable to disable it, as i didn't put it under the category. Can anyone please help me out with it.
There is a way.. are you still facing problem?
@@Ajanth988 I've find a solution, thank you bro
Cool I thought you only do this with domain controller.
this is tiresome, takes a lot of time.
Please Help me I can open only notepad.exe then close gpedit.msc right now I can not open gpedit.msc as well as CMD . So what I can do now . Please please Help me. please reply fast.
Same, did u fix it??
@@charlesjsescoto No I format my windows
@@rameshkaneria7643 i found something different way to fix this problem, gl to u man, ty anyways
Please man tell me how to Disable it Please..
This can be dangerous to say the least
Sweden ...first think (Most Important) u can add mmc.exe , cmd.exe , regedt32.exe . after that u can changed enabled or disabled that policy ..
How to open when gpedit and registry blocked
Are you still facing the problem?
There is a way to fix it.
@@Ajanth988 TELL ME
@@Ajanth988 TELL ME
Amazing
Will this work on Windows XP?
yes
that's cool!
too bad i don't have pro version
***** Yeah that's just the way Microsoft made it.
Less complicated than applocker. Seriously.
No i would not like to restrict users lol :-D
You evil man LOL :-D just leg pulleth :)
zx8401ztv lol
HOW TO CHANGE COMMENTS
How do you undo this? 👉I figured it out ……………… just click on "Not Configured" radio button ⭕
I need helpp helpppppp i locked down my computer 😭😭😭😭😭
Dear sir,
1) how to prevent saving any files in windows 7 only in ( USB) ?
2) how to hide or prevent access to my Documents / Music / Pictures / Videos in windows explorer ?
3) how to prevent access to Personalization ?
please i want you to teach me how to do that its really important to me .
And send me the information to my email or share a video about it
thanks ...
Britec09 let me know asap please
hello sir
frankie
1:25. Thank me later...