If the message “This application is blocked by the system administrator” O “This program is blocked by the system administrator” appears in Windows 10 when you start a program, and is on a home computer where your user has access rights. admin … it's strange, but it can be fixed.
This tutorial details the causes of this message and what to do so that the program starts and the message that the system administrator blocked the program or application does not appear. An equivalent obstacle with other causes is analyzed in another post: This app is blocked for protection reasons. The administrator has blocked the execution of this application.
Why does the application crash and what to do to clear the crash?
The two lock messages in question mean that an administrator, third-party software or malware has activated the Software Restriction Policies (SICKLE); it is blocking these that makes the blue window appear “This application has been blocked by the system administrator ”Or the standard error window with the same program message.
Our job is to deactivate the lock. The main requirement for this is to have administrator rights on the computer. The actions themselves can be performed in the Local Group Policy Editor (only for Windows 10 Professional y Enterprise), in Registry Editor (for all versions of Windows) and some variations of these methods.
To disable locking in Local Group Policy Editor, as long as you haven't configured SRP for any purpose, follow these steps (important: apply the method only on your personal computer, not on your work computer, but still, I recommend that you create a system restore point beforehand):
- Presione Win + R on your keyboard (Win is the key with the Windows logo), scribe gpedit.msc in the Run window and press Enter.
- In the Local Group Policy Editor window that opens, go to Computer Settings – Windows Settings – Security settings – Restricted software policies.
- If this section opens and contains a subsection called “Security levels”, go to it and observe: which item is marked next to which – if it is close to “Forbidden” O “Normal user”, right-click on the “Not restricted “and select” Predetermined “in the context menu. Also see subsection “Advanced rules” to see if there are security level options “Forbidden” O “Normal user”. If so, open those items and set them as Unrestricted (by default, there are two items with unlimited security levels in this section).
- If the option “Unlimited” is already checked in the subsection “Security levels”, right click on any other item, select “Predetermined” and then make “Unlimited” revert back to the default in the same way.
- If the partition does not open and the message appears “Policies for the use of restricted programs are not defined”, right-click on the partition name and select “Create policy for the use of restricted programs” in the context menu. Now you can check the same items described in step 3, but in general it is not necessary: locks that have been created in some way are often overwritten when the Restricted Use of Programs policy is created manually.
- If there are policies for restricted use of programs, go to Advanced Rules and check for items with Forbidden status. If there are, remove them.
- Restart your computer or just reboot (in Task Manager, if it opens) the Explorer.
Immediately after, the changes should take effect and there should be no message that the system administrator has locked the program. If so, also perform the steps in the following procedure, paying special attention to the step 4.
Unlock the program in Registry Editor
The advantage of this method is that it is also suitable for the home version of Windows. The downside is that the registry editor itself may be locked (there is a separate post on this topic: The system administrator prohibits editing the registry; How to solve it).
- Presione Win + R, scribe regedit in the Run window and press Enter.
- If the registry editor opens, go to
HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowssafercodeidentifiers
- Double-click the parameter named Predetermined level and set the value 40.000 for this (the hexadecimal system must be chosen).
- Notice if the code identifiers section contains subsections other than the one named “262144”. If these subsections exist, they can also be responsible for blocking programs and can be removed (right-click on the subsection name with the number – delete).
- Close the registry editor and restart your browser or restart your computer.
If the registry editor doesn't start either, the task becomes more difficult, but in some cases it can be solved (but I recommend unlocking the registry editor as previously described): create a .reg file with the following content:
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowssafercodeidentifiers] "DefaultLevel"=dword:00040000
This can even be done on another computer (if you can't get anything to work in this). To create a .reg file, just run notepad, copy the specified code, later go to “Archive” – “Save as”, be sure to put “All the files” in the countryside “Type of file” and later assign any name to the file, manually specifying the .reg extension
Thereafter, copy the file to folder C: Windows on the computer where the application or program is reported to be blocked by the administrator and “run”. Accept the addition of data to the record and, after successful addition, restart your computer.
And one more option: in case there is no way to access the registry editor, you can boot from a LiveCD or Windows installation drive, run the registry editor in the system restore tools and then make the necessary modifications. The procedure (for a different case, but the principle is the same) described in the How to reset Windows password section 10 (section on reset without programs).
That is all for now. Hopefully one of the ways will help you fix the problem. Opposite case, tell me in the comments which program is running and in which folder it is located (full path), and word by word what text appears in the message, because there are several similar but slightly different crash notifications in Windows and by them you can judge what exactly is happening.
