How to block or allow certain applications for users in Windows

As the world becomes more digital, we must ensure that our computer’s environment is secure and aligns with the specific standards that will allow it to run smoothly. Whether your systems administrator is managing multiple user accounts in an organization or you are simply a concerned parent trying to monitor your child’s electronic device, you would need to know how to block or allow certain applications in Windows. This guide will walk you through the steps to take control of application access and effectively uphold your system’s security.

Why control access to applications?

It’s critical to understand why controlling applications is important before moving on to the “how.” Software is frequently used in workplaces to improve efficiency, reduce security vulnerabilities, and help assure adherence to corporate standards. On the other hand, workers might require the freedom to utilize tools that facilitate their productivity. Finding the ideal balance is crucial, which is why application management is necessary.

How to use Windows Firewall 

The Windows Firewall can be handy for users who want to block network-related applications. This method is also beneficial for those who want to limit internet access.

To access Windows Firewall settings:

1. Navigate to the Control Panel, then go to System and Security, then click on Windows Defender Firewall
2. Next, create a New Rule
   1. Click on Advanced Settings on the left
   2. In the “Windows Firewall with Advanced Security” window, right-click on Outbound Rules and select New Rule
3. Choose the Program option then specify the path to the application that you want to block
4. Lastly, follow the prompts to block the connection and finish.

This application will now be restricted from accessing the internet through Windows Firewall.

How to block or allow applications in Windows without Firewall

If you use a version of Windows with GroupPolicy, you can easily block applications through policy settings.

1. To start, press Win+R to open Run Dialog.
2. Then type “gpedit.msc” and then press Enter
3. Go to User Configuration
   1. click on Administrative Templates
   2. Then click System
4. Look for a setting called “Don’t run specified Windows applications”
   1. Enable this setting
   2. Click Show and enter the names of the applications you would like to block
      1. Example: chrome.exe, word.exe, notes.exe

Windows Pro and Enterprise editions

If you have a Windows Pro model or any of the new Enterprise editions, you can configure or use application control or software restriction policies (SRP) to allow or restrict applications as well.

1. To start, press Win+R to open Run Dialog.
2. Then type “secpol.msc” and then press Enter
3. Navigate to Local Policies
   1. Click on Application Control Policies
   2. Then Software Restriction Policies
4. Right-click and select Create New Software Restriction Policies if none exist
5. Under Additional Rules, choose Create New Path Rule for applications you want to block or allow
   1. Set the security level to Disallowed or Unrestricted

Using third-party software

You can also consider third-party tools made for application control and endpoint management if you’re in charge of a bigger network or want more precise control. We do not endorse the list below, but we found some tools for each in a quick Google search: Microsoft Intune, Symantec Endpoint Protection, and SolarWinds. These apps can help with issues such as:

• Granular blacklisting and whitelisting of applications.
• Tracking the performance and usage of applications.
• Importing policies across platforms for numerous users.

Conclusion

We hope this guide helped you resolve or even learn how to block or allow certain applications on your Windows device. Using any of the above methods, you can effectively manage how applications interact with your network without relying solely on Windows Firewall.