How do I block an EXE file in Windows 10?
Download PC Repair Tool to quickly find & fix Windows errors automatically On Windows 11 or Windows 10 computers, PC users can apply stringent security measures like
protect against and prevent Ransomware attacks & infections, block users from installing or running programs, and can use AppLocker to prevent
users from installing or running applications. In this post, we walk you through the steps on how to block .exe files from running on Windows client or Windows Server by applying Software Restriction Policies, a set of rules that can be configured using Group Policy Editor. What are Software Restriction Policies?According to Microsoft documentation, Software Restriction Policies (SRP) is Group Policy-based feature that identifies software programs running on computers in a domain, and controls the ability of those programs to run. Software restriction policies are part of the Microsoft security and management strategy to assist enterprises in increasing the reliability, integrity, and manageability of their computers. SRPs are integrated with Microsoft Active Directory and Group Policy – but can be used to create highly restricted configuration policies on stand-alone computers as well, in which you allow only specifically identified applications to run on the system. Similar to configuring Controlled Folder Access using Group Policy & PowerShell, which when enabled, the feature is able to track executable files, scripts, and DLLs that attempt to make changes to files in the protected folders, PC users can block .exe files in vulnerable folders from running with Software Restriction Policies on Windows 11/10. To block exe files from running using Group Policy in Windows 11/10, do the following:
Computer Configuration > Windows Settings > Security Settings > Software Restriction Policies
You can block (at least) the following:
Once done, you can exit the Local Group Policy Editor. If you want to allow some specific executable files to run in these folders, simply create an exception by selecting the Unrestricted option in the Security level drop-down. For Windows 11/10 Home users, you can add Local Group Policy Editor feature and then carry out the instructions as provided above. That’s it on how to block exe files from running using Group Policy in Windows 11/10! Related post: Block Macros from running in Microsoft Office using Group Policy How do I disable .exe from Group Policy?To disable .exe from Group Policy Editor or to apply GPO to block the software by file name, follow these instructions:
How do I block an EXE file?You can block exe in Windows 11/10 in either of the following ways:
Read: Exe files getting deleted randomly. How do I fix this program is blocked by Group Policy?To fix this program is blocked by Group Policy error on your system, do the following:
How do I run a program that is blocked by administrator?To run a program that is blocked by an administrator, you need to unblock the file. Here’s how:
Hope you find this post useful! Related reads:
Obinna Onwusobalu has studied Information & Communication Technology and is a keen follower of the Windows ecosystem. He has been a Windows Insider MVP (2020). He runs a computer software clinic. |