How to block desktop app access on Windows 10
Yes, you can restrict access to most apps on Windows 10, and in this guide, you will learn how.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
On Windows 10, removing access to specific apps can come in handy in many scenarios, such as when you must prevent users from launching built-in tools (such as PowerShell and Command Prompt) torun scriptsor make unwanted system changes. Maybe you need to set up an app that should only be accessible by you and no one else, or you installed the Microsoft 365 version of Office and since you can’t customize the installation, you need to restrict access to some of the apps to comply with your organization’s policies.
Regardless of the reason, if you have to restrict access to specific applications,Windows 10includes at least two ways to disable them using Group Policy Editor or Security Policy console.
Thisguidewill walk you through the steps to disable access to one or more desktop applications on Windows 10.
How to disable apps access from Group Policy
To disable access to certain apps on Windows 10 from Group Policy, use these steps:
Once you complete the steps, the apps you specified should no longer be accessible by users configured on the device. The settings should apply immediately, but you may need to restart the computer for the changes to take effect in some cases.
You can always revert the changes using the same instructions, but instep 5, select the"Not configured"option.
These instructions will disable access to the apps for all users. However, you can also use theLocal Group Policy Editor to apply the settings to one or multiple userswhile excluding the reset.
Get the Windows Central Newsletter
All the latest news, reviews, and guides for Windows and Xbox diehards.
How to disable apps access from Security Policy
To prevent users from launching specific apps with the Local Security Policy on Windows 10, use these steps:
After you complete the steps, users will no longer be able to launch the application you specified. You can always repeat the steps to block access to other desktop applications.
If you want to undo the changes, you can use the same instructions outlined above, but onstep 4, right-click the hash of the app currently blocked and select the"Delete"option.
If you are disabling applications to prevent users from making system changes, you can use these instructions to restrict access toPowerShellorCommand Prompt. You can also limit access to theTask ManagerandRegistry.
Furthermore, you can tryswitching the account type to “Standard User"to prevent users from making system changes and make the account more secure. The only caveat with this approach is that users will still have access to apps like PowerShell and Command Prompt to perform some non-administrative tasks.
More resources
For more helpful articles, coverage, and answers to common questions about Windows 10, visit the following resources:
Cutting-edge operating system
A refreshed design in Windows 11 enables you to do what you want effortlessly and safely, with biometric logins for encrypted authentication and advanced antivirus defenses.
Mauro Huculak has been a Windows How-To Expert contributor for WindowsCentral.com for nearly a decade and has over 15 years of experience writing comprehensive guides. He also has an IT background and has achieved different professional certifications from Microsoft, Cisco, VMware, and CompTIA. He has been recognized as a Microsoft MVP for many years.
