Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using Windows XP SP3 and I am having problem controlling .exe on my computer. Is there a way to me to control the programs I would allow my the users of my computer and if the program isn't in the list, would prompt for the administrator account to continue?

I have seen a number of suggestion over the Internet but all of the require a series of steps. Is there an easy way for me to idealize this concept (like the use of User Account Control, etc.)


share|improve this question
Please edit your question to be more specific on which solutions you've already looked at. Otherwise, you may get an answer you implicitly didn't want. – iglvzx May 19 '12 at 5:19
Sorry for the verbose question. I have edited the question. Hope to get answers soon. – Cyril Horad May 19 '12 at 7:55

Simply use Access Control Lists (ACLs) by means of tools such as cacls, xcacls and the security tab in the file/folder properties in Explorer to do one of the following:

  1. explicitly deny the Execute access to the limited access account on anything but the files it is allowed to run - since Deny takes precedence, this is the easiest way.
  2. fix the permissions and only grant the administrator the Execute access to everything and only limited access the Execute access to the files it is supposed to be able to execute.

And yes, it's as simple as that. All the tools are aboard already.

Most other solutions will only execute known programs but without regard to the user trying to execute them. Please note that you can also use Group Policies, but they are less reliable.

Since you edited your question and changed the meaning a bit, let me suggest SuRun. There are English resources available and the GUI of it is pretty intuitive.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .