Use the registry to restrict the operation of specific programs—All strategies for using the registry
For some programs closely related to the system, if you are allowed to use them at will, it is very easy to cause crashes or even system crashes. Restrict the operation of a specific program through the system's own registry.
1. One-click lock pass
What we need to do is to include the "RestrictRun" key value in the registry to limit the running of most programs
。
Run "Regedit" to open the registry editor, expand the HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer branch (if not, create a new one), right-click in the right pane, select "New → Dword Value", enter the sub-item name "RestrictRun", then double-click the item, enter the key value "1" in the pop-up "Edit Dword Value" dialog box, and exit after confirmation.
Close the registry editor and log in to the system again. At this time, most programs have been restricted from running. If you want to open a program, a warning window will pop up: "This operation has been cancelled due to the restrictions of this computer. Please contact your system administrator." Of course, you cannot import the registry file by double-clicking the REG file.
Change the key value of the Dword value "RestrictRun" from "1" to "0" to remove the restrictions of all programs.
2. How many doors should I leave
In fact, it doesn’t make much sense to simply use the “RestrictRun” key-value restriction program to run. What we need is to allow others to use most programs, and only restrict some important or confidential programs, so we have to leave a few doors for ourselves.
Also in the above registry branch, right-click the "Explorer" primary key in the left pane, select "New → Primary Key" from the menu, enter the primary key name "RestrictRun", and then create a new string value in the key value area on the right side of the primary key, and name it "1", double-click this subkey, and enter the first program name that is allowed to run in the key value box. In order to leave a way for yourself to lift the program restrictions, the registry editor must be added, so the key value of "1" is set to "".
Next is to add or decrease the program that restricts running according to the actual situation. Taking the example of allowing the Notepad program "" to run, create a new string subitem with "2" in the primary key of "RestrictRun", and set the key value to the program execution file name "", be careful not to add quotes when entering. This way others can still use the notepad program on the computer to edit. Similarly, we can continue to add other programs that allow others to use under this primary key.
(Source: Hot Network)