How do I allow Windows 7 users to run only Specific applications?

• The first thing you must do is open the Group Policy Editor. You won't find a menu entry for this tool. Instead you start the tool by clicking the Start menu and then entering the command gpedit.msc. When this tool opens, you will find yourself looking at a dual-paned window that looks deceptively simple to use (Figure A). 

• Figure A

  

• The next step is to navigate to the correct location of the configuration option we want to change. This is to be found in the following path:
  User Configuration | Administrative Templates | System
  When you navigate to that path, you will want to click on the System entry to reveal the available settings in the right pane (Figure B). 

• Figure B

  

• Double-click on the entry for Run Only Specified Windows Applications to open the preferences for this setting. When this is opened (Figure C), you will need to first make sure Enabled is checked. Once you have done that, the Show button will become available.

• Figure C

   

• The next step is to click the Show button, which will open a small window where you can enter the allowed applications (Figure D). In this window, you will add, one per line, the executable file name (including extension) for each of the applications you want the users to be allowed to execute. 

• Figure D

  

• After these step just open cmd and type command gpupdate