Don't run specified Windows applications: registry value DisallowApps (DisallowRun)UserHKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun
- Policy ID
- DisallowApps
- Scope
- User Configuration
- Supported on
- At least Windows 2000
- Source
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
- Category
- System
Registry
DisallowRun
-User(list values)
REG_SZUser- Enabled value
- Depends on the option value
- Element
- List of disallowed applications
- Value type
- REG_SZ
- Value name prefix
- -
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun] ; Add one value per list entry, increasing the number "1"="<enter value>" "2"="<enter value>"
CMD
:: Add one value per list entry, increasing the number reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "1" /t REG_SZ /d "<enter value>" /f reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v "2" /t REG_SZ /d "<enter value>" /f
PowerShell
# Add one value per list entry, increasing the number New-Item -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun' -Force | Out-Null New-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun' -Name '1' -PropertyType String -Value '<enter value>' -Force | Out-Null New-ItemProperty -Path 'HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun' -Name '2' -PropertyType String -Value '<enter value>' -Force | Out-Null