How to restrict access to desktop apps on Windows 11
If you don’t want users accessing certain apps, use these instructions to block them on Windows 11.
When you purchase through links on our site, we may earn an affiliate commission.Here’s how it works.
OnWindows 11, you can block virtually any traditional desktop application, and in this guide, you will learn two ways to complete this task.
Although users need access to applications, they only need access to some of them. For example, usually, they don’t need access to tools like Command Prompt, PowerShell, or the Registry since they can be used for making unwanted system changes.
If you are setting up a device that needs restrictions to certain apps, Windows 11 allows you to prevent users from accessing desktop applications from the Group Policy Editor and Security Policy.
Thishow-to guidewill walk through the different ways to block users from accessing specific apps on Windows 11.
How to block access to Windows 11 apps from Group Policy
To prevent users from launching certain apps on Windows 10, use these steps:
After you complete the steps, the applications specified in the policy will be blocked for any account configured on Windows 11.
If you change your mind or no longer need the configuration, you can use the same instructions to undo the changes, but onstep 5, choose the"Not configured"option.
Get the Windows Central Newsletter
All the latest news, reviews, and guides for Windows and Xbox diehards.
How to block access to Windows 11 apps from Security Policy
To restrict access to specific apps through the Local Security Policy app, use these steps:
Once you complete the steps, Windows 11 will prevent users from launching the application you blocked in the settings. You may need to repeat the steps to block other apps.
You can always allow the apps again with the same instructions, but onstep 4, right-click and choose the"Delete"option for the app’s hash.
If you plan to block some specific apps because you want to prevent users from making unwanted system changes, then you may want to consider demoting the account to"Standard user,“which will prevent anyone from modifying the system configuration.
More resources
For more helpful articles, coverage, and answers to common questions about Windows 10 and Windows 11, visit the following resources:
Mauro Huculak has been a Windows How-To Expert contributor for WindowsCentral.com for nearly a decade and has over 15 years of experience writing comprehensive guides. He also has an IT background and has achieved different professional certifications from Microsoft, Cisco, VMware, and CompTIA. He has been recognized as a Microsoft MVP for many years.
