Prohibit the solution to run Group Policy

        There is a policy in Windows XP Group Policy that only allows Windows applications to run. If you enable and add a program name that only allows the system to run, the user will only be able to run the program in the "Allowed Application List". However, whether or not you have added gpedit.msc (Group Policy) in the "Allow only running programs list", once this policy is enabled, you can no longer run "gpedit.exe" (Group Policy)! However, we can use the following method to make "fish and bear's paw".

1 Run gpedit.msc, expand User Configuration→Administrative Templates→System, and then click the “Run only licensed Windows application” policy in the right window and double click to select “Enabled” in the window that opens. . At this point we can see that the "Show" button under the window is activated, click "Display → Add", then enter the name of the program that allows Windows to run, such as "Notepad.exe", and finally press the "OK" button .

2 At this time, do not close Group Policy immediately. Run "Group Policy" in "Start → Run" and you will find that it is no longer working! Fortunately, we did not close the "Group Policy" program, now in the "Group Policy" window, set the "Only allow Windows applications only" policy to "not configured", and then click the "OK" button.

3 If you have turned off Group Policy, you can restore the settings by restarting your computer, pressing the F8 key when the boot menu appears, and selecting "Command prompts" in the Windows Advanced Options menu. Safe mode option, then run mmc.exe at the command prompt. In the "Console" window that opens, click "File → Add /Delete Snap-in → Add → Group Policy → Add → Finish → Close → OK", now a Group Policy Console has been added, then the original Change the settings back to re-enter Windows.

mmc - mmc.exe - Process Information

Process File: mmmc or mmc.exe

Process Name: Microsoft Management Console

Description: Microsoft Management The Console Management Control program integrates many system control options. For example, device management (system, hardware) or computer authority control (Administrative management tool).

Common Errors: N/A

Is it a system process: No