Restrict programs that can be run in Windows NT / Windows 2000

  • Section(s): Applications, Restriction, Restriction
  • Published on Apr 20, 2004.
  • Last Modified on Apr 20, 2004.
  • Last Modified by Wayne Maples.
  • Rated 4.2 out of 5 based on 5 votes.
One can restrict the programs that a user can run by setting the RestrictRun which will restrict the user to programs in the Explorer\Restrict subkey. Apply the following Windows NT / Windows 2000 registry hack:

Hive: HKEY_CURRENT_USER
Key: Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Name: RestrictRun
Type: REG_DWORD
Value: 1

This setting applies the restriction to Explorer (note the key policy applied to). Users can still run applications from Run command and command shell.

If any DOS programs are in the list, be sure ntvdm.exe is in the list of allowed programs. ntvdm.exe is needed to create dos space for your dos program to run in.

Desktop and Explorer Restrictions Tips:

Desktop icons hidden
File menu in Explorer is removed
Map Network Drive and Disconnect Network Drive menu from Explorer removed
Network Neighborhood icon removed and prevent network access from Explorer
Common Groups from Start Menu removed
Find command removed from Start Menu
Run command removed from Start Menu
Shut Down button removed from Start Menu
Control Panel, Printers and My Computer in Explorer hidden and on Start Menu
Taskbar on the Start Menu hidden
Most Recently Used entries removed from Run history
Menus do not display upon right click on Taskbar, Start Button, Clock, or Taskbar icons
Menus do not display upon right-click of Desktop or Explorer's Results pane.
Only programs in Restrict subkey can be run
Remove Run command from Start menu

About Wayne Maples


Article not looking right or info is missing? Let us know so that we can fix it: .


Receive all the latest articles by email!

Receive Real-Time & Monthly WindowsNetworking.com article updates in your mailbox. Enter your email below!
Click for Real-Time sample & Monthly sample

Become a WindowsNetworking.com member!

Discuss your network issues with thousands of other network administrators. Click here to join!

Community Area

Log in | Register

Readers' Choice

Which is your preferred Anti Spam Hardware solution?

Follow TechGenix on Twitter