How To Block Unwanted Apps on Windows with Group Policy Easily

1. Introduction: Why We Need to Restrict Applications on Windows

Nowadays, computers have become an essential tool for study and work. However, entertainment applications such as short-video software often distract students during online classes and reduce work efficiency for office employees. Simply deleting apps or hiding shortcuts cannot solve the problem fundamentally, because users can easily reinstall or find the program files to launch them. Fortunately, Windows has a built-in powerful tool called Local Group Policy Editor. It allows users to block designated applications at the system level and standardize the use of computers.

In this article, we will introduce two complete methods to restrict apps: the basic file name restriction method and the advanced hash rule restriction method. We will also explain the loopholes of the basic method in detail. Every operation step is described clearly, so even beginners can follow the guide to finish the settings smoothly. These solutions are suitable for family computer management and enterprise office management scenarios.

2. Basic Method — Block Apps by Program File Name

This is the most commonly used method for beginners. It takes little time to set up and can quickly disable target applications. The core principle of this method is to let the system identify and block apps according to their executable file names. Here are the detailed operation steps:

1. Press the `Win` key and `R` key together to open the Run window. Type the command `gpedit.msc` in the input box and press Enter to launch the Local Group Policy Editor.
2. On the left sidebar of the editor, expand the folders in order: User Configuration → Administrative Templates → System.
3. Look for the option named Don’t run specified Windows applications on the right side of the window, then double-click it to open the configuration window.
4. In the pop-up window, select the option Enabled to activate this group policy rule.
5. Find the area labeled List of disallowed applications at the bottom, then click the Show button to open the list editing panel.
6. If you do not know the exact name of the executable file, go back to the desktop. Right-click the shortcut icon of the target application and choose Properties.
7. In the Properties window, check the content in the Target field. The file ending with `.exe` at the end of the path is the main program file. Copy this full file name.
8. Return to the list editing panel, paste the copied file name into the input box, and click OK to save all settings step by step.
9. After completing all configurations, double-click the restricted app icon. A system prompt will pop up: This operation has been canceled due to restrictions on this computer. Please contact your system administrator. It means the basic restriction works successfully.

Summary of this part: The file name restriction method is simple to operate and friendly for new users. It is perfect for temporary management of computer applications. But this method has an obvious flaw: it only identifies programs by fixed file names, so it can be bypassed easily.

3. Loopholes of the Basic Restriction Method

Many people find that the app restriction fails soon after setting it up. The main reason is that others can bypass the rule by renaming the program file. We will explain the bypass principle and operation in detail below:

1. Open the installation folder of the target application according to the file path shown in the Properties window.
2. Locate the main executable file with the suffix `.exe`. Right-click the file and select Rename to change its original name.
3. After renaming the file, double-click the new file directly. The application can launch normally, and the basic restriction becomes invalid.
4. To fix this problem temporarily, you can go back to the group policy list and add the new renamed file name to the disallowed list. However, this is only a temporary solution.

Summary of this part: Restricting apps by file name cannot achieve permanent blocking. Users can keep changing file names to break the limit. For long-term and strict management, we need to use the advanced security rules of Windows.

4. Advanced Permanent Method — Block Apps via Hash Rules

The hash rule is the most reliable restriction function in Windows. Each complete file has a unique hash value, which is like the exclusive ID of the file. No matter how you rename the file or move its storage location, the hash value will never change. This method can completely prevent the application from being launched. Follow these detailed steps:

1. Open the Run window again with `Win + R`, enter `gpedit.msc` and open the Local Group Policy Editor.
2. On the left navigation bar, expand the options in sequence: Computer Configuration → Windows Settings → Security Settings → Software Restriction Policies.
3. Select the sub-item Additional Rules under Software Restriction Policies. Right-click the blank area on the right and choose New Hash Rule.
4. In the New Hash Rule window, click the Browse button, then select the main executable file (`.exe`) of the application you want to block.
5. After selecting the file, click Apply and then OK to create the hash rule successfully.
6. Go back to the application folder and double-click the program file. The system will pop up a warning: This app has been blocked by your system administrator. The app cannot run anymore.
7. Try to rename the program file randomly and double-click it again. The application is still blocked by the system, and the restriction will not fail because of renaming.

Summary of this part: The hash rule is a deep-level security protection of Windows. It relies on the unique file feature code to block applications, which completely avoids the problem of being bypassed by renaming files. This is the best choice for long-term and strict application management.

5. Conclusion: Choose the Right Restriction Method as Needed

The two restriction methods have their own characteristics and applicable scenarios. If you just need short-term control and pursue simple operation, the basic file name restriction method is enough. If you want to block applications permanently and prevent others from cracking the restriction, the hash rule is your best choice.

These two sets of solutions are compatible with all kinds of Windows desktop applications, including short-video apps, games and live streaming software. By mastering these skills, you can effectively manage the use of computers, create a pure environment for study and work, and avoid being disturbed by entertainment software.

6. Demo Video

You can watch the following demo video by select the subtitle to your preferred subtitle language.