While I’m certain you’re responsible with the programs you run on your computer, what about the other citizens you work and habitable with? whether you’re an administrator or share your computer with anyone else, you might want to check out Trust-No-Exe.

What does it do? It installs as a service and can block any executable process: exe, dll, sys, com, etc. Set up allow and deny folders, start the service, and programs just won’t launch anymore. It’ll block attempted launches from anything -

floppy or USB drives, network shares, wherever. Theoretically, you could even use it as a basic malware defense by adding your temporary World Wide Web files to the denied list.

Since it’s a service, it’s always protecting your PC. Just be certain you lock down access to services.msc and your control panel, since there’s no password option to keep users out.

It’s an oldie, but a goodie, and definitely a good, simple way to prevent annoying installs and inappropriate use.

Original post by Lee Mathews