If you going to hand over your computer to children, then you might want to allow to run only specific programs which are specified by you. You can do it via built-in Windows Group Policy Editor (available in Professional and above versions of Windows) Windows Vist / 7 / 8 / 10.

How to configure and allow Windows 10 to run specific programs only?

1. Open the Run box by pressing Win+R Key simultaneously.

2. Type gpedit.msc and click OK.


3. It will open Group Policy Editor.

4. Navigate to the following from left pane:

User Configuration > Administrative Templates > System.

local-group-policy-editor-system5. Double click on “Run only specified Windows Applications” from the right side pane.

run-only-specified-windows-applications6. Select the check box “Enabled” and click on “Show”.

check-box-enabled-and-show-in-group-policy-editor7. Now click the blank field next to the star (*) and enter the name of the applications which you want to run. For example, if you want to run Chrome, enter chrome.exe.

show-contentIn my case, we have entered firefox.exe and chrome.exe. You can add as many applications you want.


If you enable this policy setting, users can only run programs that you add to the list of allowed applications.

If you disable this policy setting or do not configure it, users can run all applications.

This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer.

You can also block users from installing or running software in Windows 10/8/7. One can use third party application AskAdmin or Program Blocker to block software from running in Windows 10 .

Share your thoughts here!