Block download of executable files

Thank You so much! Your article helped solved a problem that I have been fighting with for weeks. Your email address will not be published. Aggiungi e-mail alla newsletter. Notify me of follow-up comments by email. Notify me of new posts by email. This site uses Akismet to reduce spam. Finally, if you have a guest account on your computer that anyone can use, you need a method of protecting your PC from malicious downloads.

The safest alternative is to disallow any downloads at all. Obviously, the biggest loophole in this method is that someone could just download Chrome or Firefox and download all they want, right?

Yes, so technically, you have to setup your computer in a way so that it can either only run IE or will block Firefox and other browsers from running. You can read my previous post on setting up kiosk mode for an account in Windows 10 , which is the first method.

To prevent other applications from running, you would need to configure something like AppLocker. Luckily, disabling downloads in IE is just a few clicks away. Begin by opening up IE and clicking on Tools on the menu bar.

Then click on Internet Options to open the Internet Options window. On the Internet Options window, click on the Security tab and then click on the Custom Level button located in the Security Level for this Zone section.

Removed Chrome and Edge from the system Windows 10 Pro. Physically removed the folders and files associated with both programs. Reinstalled Chrome and got the same problem and then Edge as well. Both block the download of EXE files. I tried to resolve this with the Visual Studio Group, asking what dependencies the installer needs that may be causing it to be blocked.

I have altered the default security and access permissions of the system, but have not deliberately blocked any EXE files from being downloaded. Any and all suggestions would be welcome. I am on a deadline and am stuck not being able to download and install Visual Studio Yes, I should not have removed VS before installing , but it never occurred to me this type of problem would happen. Was this reply helpful? Yes No.

Sorry this didn't help. Click this folder in the left-hand column again. Create a new folder. Click Edit , select New , and click Key. This creates a new folder inside of the "Explorer" folder titled "DisallowRun". Part 4. Select the "DisallowRun" folder. Click this folder below the "Explorer" folder on the left side of the window.

Create a new string value. Click Edit , select New , and click String Value. This will name your string value "1". Open the string value. Double-click the 1 string value to open it. Enter your application's name. Click the "Value data" field, then type in the name and extension of the application that you checked in part one.

For example, to block Notepad, you would type in notepad. Click OK. Doing so saves your string value. This string value will prevent the specified program from being opened. If you want to add subsequent string values for other programs, name them in numerical order e. Close the Registry Editor. At this point, you should no longer be able to open the program, but you may need to restart your computer before these changes take effect. When creating a registry hack with Notepad.

Do I save the file type as unicode? If the file doesn't contain any non-ordinary characters such as from emojis or text from another language , then you can save it as any file type you want.

Not Helpful 0 Helpful 2. I couldn't rename the Key under "explorer" to DissallowRun it gave an error message. I tried with "Disallow" only. Not Helpful 83 Helpful 6. Yes it is still visible, because it is not deleted. You could hide the file via external Software if you wanted. Include your email address to get a message when this question is answered. Detailed instructions for doing so can be found on the Microsoft website. Helpful 0 Not Helpful 0.

Be careful when editing the registry. Changing or deleting any values not explicitly covered in this article can cause damage to your computer. Users can still run blocked EXE files by changing the files' names. This won't always work, but it's something to keep in mind. You Might Also Like How to.