How can I create a new group policy to prevent software installation and running?

Group PolicyTo maintain the security of our system, the specific content is as follows.

Sometimes I don't want anyone to chat on my computer, or install unnecessary software on my computer to make a mess of my computer, in fact, in our computer, we can set up to prevent others from installing and running the software maliciously on our computer. Below I will tell you how to use the group policy to restrict the installation and operation of the software.

1. Create a policy by yourself

Open the Group Policy Editor, expand "Computer Configuration/Windows Settings/Security Settings/Software Restriction Policies", and click "Operation/create new policy" on the menu bar to create a policy.

2. Blocking chat QQ

Then, a file hash number is generated. The system also reads the basic information of the file, such as the version and company name. Select "Not Allowed" for "security level", as shown in ).

 

3. prevent software download from running

The local download mainly uses IE and Flashget. First, you must set the download folder and create a new path rule to prevent installation of the downloaded software.

1) prohibit IE download. Run the Registry Editor to expand [HKEY_USERSS-1-5-21-1202660629-854245398-1060284298-500SoftwareMicrosoftWindowsCurrentVersionInternet SettingsZones3] in turn, and then change the value of "1803" on the right to "3" for example), so that you cannot use IE to download the file.

 

2) set the flash get download location. Click "Tools> default download properties" and set the folder to d: downloads.

3) create a restriction rule. Same as above, right-click "Other Rules" and select "New Path rules", select "d: downloads" as prompted, and select "Not Allowed" as "security level ".

4. Disable Group Policy Modification

To prevent others from knowing that the restriction is caused by a group policy, you can set a disable operation group policy. "Allow" is set to a program that is not allowed to run.

Create a new group policy to prevent software installation and operation and make the computer a real computer. More knowledge about group policies needs to be learned and consolidated by readers.