Run only specified Windows applications

Supported OS tags: Windows10, Windows10RT, Windows11, Windows2000, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2003, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista, WindowsXP

Limits the Windows programs that users have permission to run on the computer. If you enable this policy setting, users can only run programs that you add to the list of allowed applications. If you disable this policy setting or do not configure it, users can run all applications. This policy setting only prevents users from running programs that are started by the File Explorer process. It does not prevent users from running programs such as Task Manager, which are started by the system process or by other processes. Also, if users have access to the command prompt (Cmd.exe), this policy setting does not prevent them from starting programs in the command window even though they would be prevented from doing so using File Explorer. Note: Non-Microsoft applications with Windows 2000 or later certification are required to comply with this policy setting. Note: To create a list of allowed applications, click Show. In the Show Contents dialog box, in the Value column, type the application executable name (e.g., Winword.exe, Poledit.exe, Powerpnt.exe).

• Computer
  Activate Shutdown Event Tracker System State Data feature

  Windows Server 2003 only
• Computer
  Allow Distributed Link Tracking clients to use domain resources

  Windows Server 2003, Windows XP, and Windows 2000 only
• User
  Century interpretation for Year 2000

  At least Windows 2000
• Computer
  Configure the behavior of the sudo command

  At least Windows 11
• User
  Custom User Interface

  At least Windows 2000
• Computer
  Display highly detailed status messages

  At least Windows 2000
• Computer
  Display Shutdown Event Tracker

  At least Windows Server 2003 operating systems or Windows XP Professional