How to restrict all apps access except certain ones for a user

[Alpha1]

Hello all,

As the title suggests I'm looking to restrict all access to basically everything except certain applications like games.

Also I'd like to know if that may affect the game? Like will it run normally with no issue since everything is restricted on this user?
Another question if this isn't possible, can we disable certain applications from running at all instead. And access to some folders? I've found the MMC tool but I'm not sure how to proceed from there.

Any help would be appreciated!

 

[ChatGPT]

Hello,

You can achieve the desired restriction on a user account by using Windows' built-in parental control feature or by applying group policy settings. Here's how you can do it:

1. Using Parental Controls:
- Open the Control Panel and navigate to "User Accounts" or "User Accounts and Family Safety."
- Select the account you want to restrict and click on "Set up parental controls."
- Enable parental controls for the specific user account.
- Under the "Allow and block specific programs" section, you can select the games or applications you want to allow.
- Save the changes, and the user will only have access to the selected applications.

Restricting access to specific folders is not directly possible through parental controls. However, you can move the folders to a location where the user does not have access or change the folder's permissions.

Regarding your question about games running normally, if you have allowed the necessary game-related programs and files, the game should run without any issues. However, it's recommended to thoroughly test the setup to ensure compatibility.

2. Using Group Policy editor:
- Press Win + R, type "gpedit.msc," and hit Enter to open the Local Group Policy Editor.
- Navigate to "User Configuration" > "Administrative Templates" > "System."
- In the right pane, double-click on "Run only specified Windows applications."
- Select "Enabled" and click "Show..."
- Add the executables of the games you want to allow, and click "OK."
- Apply the changes, and the user will only be able to run the specified applications.

To disable certain applications from running, you can use AppLocker, which is available in Windows editions like Enterprise and Education. You can create rules to block specific programs from executing or restrict them based on file path, publisher, or other attributes.

Remember to perform thorough testing after implementing these restrictions to ensure that everything works as expected.

 

[Alpha1]

Hello,

You can achieve the desired restriction on a user account by using Windows' built-in parental control feature or by applying group policy settings. Here's how you can do it:

1. Using Parental Controls:
- Open the Control Panel and navigate to "User Accounts" or "User Accounts and Family Safety."
- Select the account you want to restrict and click on "Set up parental controls."
- Enable parental controls for the specific user account.
- Under the "Allow and block specific programs" section, you can select the games or applications you want to allow.
- Save the changes, and the user will only have access to the selected applications.

Restricting access to specific folders is not directly possible through parental controls. However, you can move the folders to a location where the user does not have access or change the folder's permissions.

Regarding your question about games running normally, if you have allowed the necessary game-related programs and files, the game should run without any issues. However, it's recommended to thoroughly test the setup to ensure compatibility.

2. Using Group Policy editor:
- Press Win + R, type "gpedit.msc," and hit Enter to open the Local Group Policy Editor.
- Navigate to "User Configuration" > "Administrative Templates" > "System."
- In the right pane, double-click on "Run only specified Windows applications."
- Select "Enabled" and click "Show..."
- Add the executables of the games you want to allow, and click "OK."
- Apply the changes, and the user will only be able to run the specified applications.

To disable certain applications from running, you can use AppLocker, which is available in Windows editions like Enterprise and Education. You can create rules to block specific programs from executing or restrict them based on file path, publisher, or other attributes.

Remember to perform thorough testing after implementing these restrictions to ensure that everything works as expected.

Group policy applies to all users so that's not good.
Parental controls are disabled and removed from my version of windows.

 

[ChatGPT]

Group policy applies to all users so that's not good.
Parental controls are disabled and removed from my version of windows.

I apologize for the confusion. If you are unable to use the group policy editor or the parental control feature, you can try using third-party software to achieve the desired restrictions.

There are several third-party applications available that provide advanced user access control and application restriction features. These tools allow you to specify which applications users can access and restrict access to specific folders.

One popular third-party software option is called Faronics Deep Freeze. Deep Freeze allows you to lock down a system and restrict access to specific applications or folders, while preserving system integrity and ensuring the desired configuration remains intact. However, please note that Deep Freeze is a paid software.

Another option is Norton Family, which offers more granular control over application and internet access for specific users. It provides features for limiting screen time, blocking inappropriate content, and managing application usage.

Before using any third-party software, make sure to thoroughly research and review the features to ensure they meet your specific requirements.

Additionally, consider reaching out to your Windows version's support or user community to explore alternative solutions that may be available specifically for your operating system version.

 

[Alpha1]

Well, foun the answer already.

for those interested, it is by applying group policy to a specific user through MMC.

create a new snap and select group policy then before finishing, hit the browse button and select computer tab and then select the user
from there, edit the group policy as you see fit.