1劫持
@echo off
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\123.exe" /v debugger /t REG_SZ /d "rundll32.exe" /f >nul
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\456.exe" /v debugger /t REG_SZ /d "rundll32.exe" /f >nul
2权限
@echo off
cd %windir%\system32
cacls 123.exe /t /e /c /p administrator:n
3组策略
需要配合 启动组策略里的“不要运行指定程序”
@echo off
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v 1 /t REG_SZ /d "qqqq.exe" /f >nul
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v 2 /t REG_SZ /d "wwww.exe" /f >nul
4阻止 给程序加点小意外，简单而平民
@echo off
if not exist e:\xxx\xxx md e:\xxx\xxx
echo >e:\xxx\xxx\ws2_32.dll
在要运行的程序目录下建立ws2_32.dll文件，可阻止该程序出错不能运行
会有该文件的提示
5针对CMD与BAT
@echo off
reg add "HKCU\Software\Policies\Microsoft\Windows\system" /v DisableCMD /t reg_dword /d "00000002" /f >nul
改键值有两个值给大家：
0 表示两者都可以运行
1 两者都不能运行
2 只能运行BAT批处理，cmd禁用
@echo off
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\123.exe" /v debugger /t REG_SZ /d "rundll32.exe" /f >nul
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\456.exe" /v debugger /t REG_SZ /d "rundll32.exe" /f >nul
2权限
@echo off
cd %windir%\system32
cacls 123.exe /t /e /c /p administrator:n
3组策略
需要配合 启动组策略里的“不要运行指定程序”
@echo off
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v 1 /t REG_SZ /d "qqqq.exe" /f >nul
reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun" /v 2 /t REG_SZ /d "wwww.exe" /f >nul
4阻止 给程序加点小意外，简单而平民
@echo off
if not exist e:\xxx\xxx md e:\xxx\xxx
echo >e:\xxx\xxx\ws2_32.dll
在要运行的程序目录下建立ws2_32.dll文件，可阻止该程序出错不能运行
会有该文件的提示
5针对CMD与BAT
@echo off
reg add "HKCU\Software\Policies\Microsoft\Windows\system" /v DisableCMD /t reg_dword /d "00000002" /f >nul
改键值有两个值给大家：
0 表示两者都可以运行
1 两者都不能运行
2 只能运行BAT批处理，cmd禁用
