How to Prevent Executables/Programs from Running from Unapproved File Paths

win11homeuser · Mar 30, 2025

I have a Windows 11 Home Laptop, running version 23H2. I have created a second user account named "Guests" for my friends and family to use my laptop when they need to. However, I don't want them to accidentally change a setting or install something to my laptop. I already know that you can use a registry key named "DisallowRun" to prevent certain programs from opening (such as regedit.exe, cmd.exe and a few others), but I want to block programs from opening if it's not stored on an allowed file path.

For example, the guest should be able to run programs from "C:\Program Files", but I don't want them running programs from "C:\Users\Guest\Downloads".

If possible, is there also a way to also block other programs/executables using different file types? (for example, .bat files)

Thank you for your help and support.

neemobeer · Mar 30, 2025

Windows has shipped with an account specifically for this shockingly call 'Guest' forever
You can enable it by opening an elevated powershell prompt (Right click, 'run as admin') and type the following

Powershell:

Enable-LocalUser -Name Guest

You would need to upgrade to Windows 11 Pro for fine-grain blocking of application execution. This would give you access to AppLocker which you can create rules of what is allowed and what is not based on a multitude of file system characteristics and assign these rules to users or security groups.

antspants · Mar 30, 2025

Hi, welcome.

win11homeuser said:
I have a Windows 11 Home Laptop

Upgrade to Windows 11 PRO then checkout neemobeer’s comment.

neemobeer · Mar 30, 2025

Meant to add pro, edited.

garlin · Mar 30, 2025

AppLocker requires Pro, EDU or Enterprise in order to use the Group Policy Editor. Some users have figured out how to force policies created on another system to work on Home, but it's beyond what most casual users can do.

win11homeuser · Mar 31, 2025

antspants said:
Hi, welcome.

Upgrade to Windows 11 PRO then checkout neemobeer’s comment.

Hi, unfortunately, upgrading to the Pro version isn't currently an option for me, as if it was, I would have already done that.

neemobeer said:
Windows has shipped with an account specifically for this shockingly call 'Guest' forever
You can enable it by opening an elevated powershell prompt (Right click, 'run as admin') and type the following

Powershell:

Enable-LocalUser -Name Guest

You would need to upgrade to Windows 11 Pro for fine-grain blocking of application execution. This would give you access to AppLocker which you can create rules of what is allowed and what is not based on a multitude of file system characteristics and assign these rules to users or security groups.

I did know that, but, isn't it the same as creating a different user, removing it from the "Users" localgroup and adding it into the "Guests" localgroup? If so, I've tried that, but it doesn't stop people from running unauthorised programs.

Thank you for the help though.

antspants · Mar 31, 2025

win11homeuser said:
Hi, unfortunately, upgrading to the Pro version isn't currently an option for me

Are you able to explain why?
Pm me if you like
It’s just a matter of buying the key and entering it. It makes a few changes, nothing major, and you’re off

win11homeuser · Mar 31, 2025

antspants said:
Are you able to explain why?
Pm me if you like
It’s just a matter of buying the key and entering it. It makes a few changes, nothing major, and you’re off

To be honest, I just don't have the money to buy a Windows Pro product key at the moment.

antspants · Mar 31, 2025

win11homeuser said:
To be honest, I just don't have the money to buy a Windows Pro product key at the moment.

I’ll buy you one. PM me

win11homeuser · Mar 31, 2025

antspants said:
I’ll buy you one. PM me

Hi, thank you for the offer. You don't have to though. Also, how do you pm someone on here? I'm new to this site

antspants · Mar 31, 2025

Go to their profile and click on “Send Direct Message”
I’ll message you. You’ll see a notification on the envelope icon next to your profile name at the top. You’ll need to refresh this page to see it

win11homeuser said:
You don't have to though

Already done. I need an email address to forward the redeem email to

antspants · Mar 31, 2025

Actually I’ll just redeem it and DM you the key

antspants · Mar 31, 2025

All done.

Upgrading is easy, the complications might arise if you decide to do a fresh install.
If the laptop didn’t come with Windows 11, then there is a chance that the Key is embeded into the BIOS and the only option will be to install Windows 10..

There is a work around.

Did your laptop come with Windows 11?

win11homeuser · Mar 31, 2025

antspants said:
Did your laptop come with Windows 11?

Yes, it came with Windows 11 Home installed

antspants · Mar 31, 2025

So if reinstalling fresh, you might only be given the option to install Windows 11 Home

If you want to bypass the embedded version of Windows Home during the install process and install Windows Pro, please read the following.

To bypass the BIOS version restrictions, you can edit a multi edition Windows.iso

Open notepad and enter the following

Code:

[Channel]
Retail

Save the file as ei.cfg
Place the file in the ISO sources folder.

I am not sure if AnyBurn free (<— Instructions) allows to edit the ISO, there are other ways

Download Anyburn Free (I have the Pro versions so I am unaware of the Free versions restrictions)

During the Windows installation you will be asked what version of Windows you would like to install.

A more advanced way to do it is to do the following:

Code:

[EditionID]
{Edition}

[Channel]
Retail

[VL]
0

Replace the line {Edition} with the Windows edition you want to install.
EditionID can be: Home, Professional, Enterprise, Education, and so on, depending on the available editions in your specific Windows ISO

For example:

Code:

[EditionID]
Professional

[Channel]
Retail

[VL]
0

Channel can be changed to Retail or OEM

You can also create a pid file and pre enter your legitimate product key.

Open notepad and enter the following:

Code:

[PID]
Value=XXXXX-XXXXX-XXXXX-XXXXX-XXXXX

Save the file as pid.txt
Place it into the sources folder

Replace XXXXX-XXXXX-XXXXX-XXXXX-XXXXX with your legitimate product key. If you don’t have a product key or you want to manually enter it later just skip creating the pid.txt file.

antspants · Mar 31, 2025

Hey can someone here look at this?

This key was bought from Stack Social

antspants · Mar 31, 2025

Last time I recommend StackSocial.

glasskuter · Mar 31, 2025

Sin I think this happens if a seller gives out the same license key more than once. Stack Social is the middle man, not the actual seller of the key. But you can login to your SS account and contact them about the issue here. Hopefully you won't have to jump through hoops to get them to make it right.

Contact Us | StackSocial

Contact Us StackSocial scours the web for the newest software, gadgets & web services. Explore our giveaways, bundles, Pay What You Want deals & more.

www.stacksocial.com

Maybe I've been lucky but I've bought at least half a dozen softwares from them in the last couple of years and had no issues at all.

antspants · Mar 31, 2025

glasskuter said:
Sin I think this happens if a seller gives out the same license key more than once

Exactly what’s happened.

Contacted them earlier. Now to wait

neemobeer · Mar 31, 2025

I wasn't clear enough. You have two problems
1) You don't want people to modify the system / install programs - Guest account solves this part
2) You want to restrict execution of specific programs - Need Applocker for this

How to Prevent Executables/Programs from Running from Unapproved File Paths

New member

My Computer

Well-known member

My Computer

Like a rolling drone.

My Computers

Well-known member

My Computer

Well-known member

My Computer

New member

My Computer

Like a rolling drone.

My Computers

New member

My Computer

Like a rolling drone.

My Computers

New member

My Computer

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

New member

My Computer

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

Like a rolling drone.

My Computers

aka Mama Glass

My Computers

Like a rolling drone.

My Computers

Well-known member

My Computer

Similar threads