How To Block Specific Programs In Windows 7

AppLocker is a new Windows 7 feature that will allow you to control the usage of your computer’s applications. Just a quick list of things you can do with this new function:

  • Restrict apps to inexperience users: How many times have you lost an entire day because your children have clicked on the wrong button?
  • Limit your own usage of an application: Sometimes you need to stay focus and do your work, so why not block out the unnecessary noises?
  • In a corporate environment this can be your best friend to control the usage of programs.

In this tutorial, we will show you how to block the usage of Microsoft Excel 2010 by an user. You can use the same trick for any other apps. Applocker can accomplish more complicated tasks, but we are not going into every single details.

Note: Applocker will only work in Windows 7 Ultimate and Enterprise.

First you need to find this feature. Open the Start menu and type gpedit.msc in the search field.

applocker-search

Go to Computer Configuration -> Windows Settings -> Security Settings -> Application Control Policies an select Executable Rules:

applocker-gpedit-exe-rules

On the right pane, right click and select Create Default Rules:

applocker-ceate-default-rules

You will see three fields all with the “Allowed” permission. This will allow every user to run every program.

applocker-default-rules

Right click your mouse and select Create New Rule:

applocker-create-new-rules

A wizard will appear. Select Skip this page by default. Press Next.

applocker-before-you-begin

In this case we want to deny the access to an application for an user, so select “Deny”.

applocker-select-action-user

Type the user you want to restrict, you can also select everyone. In this case I restrict a user named “user“.

applocker-select-user-group

After that press Next:

applocker-permsisions-deny

Now we are only going to block an executable. As you can see there are several possibilities. Select “File hash” in this case.

applocker-File-hash-condition

Now you browse for Microsoft Excel:

applocker-browse-files

Go to c:\program files\microsoft office\office14:

applocker-select-excel

Press Next:

applocker-excel

Select Create:

applocker-select-create

It might take some time for Applocker to work. The best way is to reboot your system.

Now, everytime you try to launch Excel, you will see the following image:

applocker-blocked-message

What other ways do you use to block your apps from external access?