Share via

How to block Notepad by GPO for non-admin users only

Vira_2020 21 Reputation points
2020-12-16T23:03:06.513+00:00

Hello,

How can I block all non-admin users' access to Notepad by placing a GPO at domain level? This GPO shouldn't affect the Notepad access of domain admin users.

Thanks,

Windows for business Windows Client for IT Pros User experience Other
0 comments
Accepted answer
  1. Anonymous
    2020-12-17T06:28:04.71+00:00

    Hi,

    Please try below:

    1. Open Group Policy Management on DC > Edit Domain Policy > User Configuration > Policies > Administrative Templates > System > Don't run specified Windows applications > Enabled and click "Show" List of disallowed applications to input "Notepad.exe" > Apply.
      49024-image.png
    2. Go to Delegation > Advanced > Select Domain Admins > click Deny for "Apply group policy".
      48922-image.png

    Thanks,
    Eleven

    ----------

    If the Answer is helpful, please click "Accept Answer" and upvote it. Thanks.

    1 person found this answer helpful.

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Taylor Artunian 171 Reputation points
    2020-12-16T23:14:54.16+00:00

    This website shows how you can create a software restriction policy under user configuration.
    solved-gpo-to-block-software-by-file-name-path-hash-or-certificate

    From there you would need to check "Deny" for the "Apply Group Policy" permission in the Delegation tab to whichever groups you do not want the policy to apply to.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.