How to allow programs to run only from a specified folder?

Question

Active Directory

For example, only to from Program Files and D:\Programs? It is necessary through GPO.

Answer 1

AppLocker. GPO - computer - Windows configuration - security settings - application control policies. Don't forget that policies affect everything, including the system, ie. it makes sense to administrators how much in vain the rights not to limit. And don't forget about the Windows folder too, since you need at least userinit.exe to log in. And so - there you create a permissive rule of the path type for the folder, then the second for the second folder, profit.