DisallowRun

HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Data type	Range	Default value
REG_DWORD	0 | 1	0

Description

Prevents Windows from running the programs represented by entries in the DisallowRun subkey .

This entry stores the setting of the Don't run specified Windows applications Group Policy. Group Policy adds this entry to the registry with a value of 1 when you enable the policy. If you disable the policy or set it to Not configured, Group Policy deletes this entry from the registry, and the system behaves as though the value is 0.

Value	Meaning
0 (or not in the registry)	Users can run all installed Windows programs.
1	Users cannot run programs represented by entries in the RestrictRun subkey .

Change method

To change the value of this entry, use Group Policy. This entry corresponds to the Don't run specified Windows applications Group Policy (User Configuration\Administrative Templates\System).

Note

The DisallowRun subkey stores the names of programs that users cannot run. If that subkey does not appear in the registry or does not contain any entries, then this entry has no effect.

This entry prevents users only from running programs that the Windows Explorer process starts. It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt, Cmd.exe, this policy does not prevent them from starting programs in the command window that they are not permitted to start by using Windows Explorer.

The Run only allowed Windows applications policy takes precedence over the Don't run specified Windows applications policy. If both policies apply to the same user, the Run only allowed Windows applications policy is implemented and the Don't run specified Windows applications policy is ignored.

Tip

For detailed information about particular Group Policy settings, see the Windows 2000 Resource Kit Group Policy Reference.

For general information about Group Policy, see Windows 2000 Server Help or Windows 2000 Professional Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Registry Table .

Related Entries

DisallowRun subkey