Tip 1: How to prevent install programs

In Windows 7 provides the possibility of flexible adjustment of the rights of each user.The administrator sets a list of actions that allowed the user to the system, and only the administrator can change this list.Software Installation - action that affects the security of the system.
you need
  • - Administrator rights.
Go to the operating system as the user "Administrator".To do this you need to know the password for the system administrator account, and enter it when you start Windows.Usually, these data have been set by the user at the first startup, for example, operating system installation.If you do not have administrator privileges, disable that account or try to recover the password.
Run "Local Group Policy Editor."To do this, type the string "Run" gpedit.msc, and confirm by pressing enter on the keyboard.So you give the command of the operating system using the command line.In the left pane, expand "User Configuration" - "Administrative Templates" - "System" and go
to "Run" only these applications under Windows.Double click on this line to start the service.
window opens the service.Set on the words "on" and then click "Show".Opens "Show Contents".Here you need to specify which programs can be run by the user.Thus, if you specify a strict list of exe-file, which the user has the right to run for execution, running setup.exe or any other installation is beyond its capabilities.
also want to disable the possibility of making changes to the registry, launching applications from the command line, as well as the launch of help.These services are interconnected, but disabling one does not cause the other off.You can set different rights for the software.If you have a large number of programs on your computer, check and remove unnecessary, not to occupy memory.

Tip 2: How to prevent run programs

Sometimes the computer you want to create some kind of protection from external users, who might not run certain programs .For example, the computer is in the entrance of the enterprise, or simply have access.You can use a special program, but as a rule, it ceases to perform its function after the completion of the process in Task Manager.
How to prevent run programs
you need
  • System solution prohibition to run executable files.
If the computer's hard drive, which is expected to create protection from launching programs, formatted in NTFS, the launch of specific files, as well as opening folders can be set in the settings of the file system.If you have a FAT file system to carry out such an operation impossible.However, the operating system Windows XP Professional has the ability to manage security policies.
To enable local security policies, go to the "Control Panel" (via the "Start" menu), select the "Administration", then go to the "Local Security Policy".Here it is necessary to select the "Software Restriction Policies" and click the "Advanced Rules".
Call the context menu by right-clicking on the selected item, select "Create a hash rule."In the window that opens, click on the button "Browse" and then select the executable program (ban on the launch of a particular program ).
paragraph "Safety" must be set to "not allowed", then close the window.In "forced" you must specify the restrictions for all users except the administrator (otherwise you will not be able to open this program).
Thus, through the applet "Software Restriction Policies" you asked an opportunity to ban certain programs.Now these programs must determine thatask specific process names that are prohibited to run.Editing any system settings can be made with the help of the registry, this case is no exception.The key is to protect the programs run as follows: HKCUSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer.A key containing the names of the files located on the lower level 1: HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRestrictRun.
now need to create a text file, insert the following lines:
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorer]
"RestrictRun" = dword: 00000001 [HKEY_CURRENT_USERSoftwareMicrosoftWindowsCurrentVersionPoliciesExplorerRestrictRun]
"1" = "programma.exe"
"2" = "application.exe"
Instead of "programma.exe" and "application.exe" fill in the names of files that you want to block the launch.Save the document under the name Zapret.reg and run it.On the issue of making data in your system's registry, answer positively.After restarting the computer will come into force changes.
  • ban install programs windows 7


Related Posts