How to prevent a program from running in windows 10?

Question

System administration

Good afternoon!
I need to find a way by which a certain program (its process name is fixed and unchanged) could not start on a PC, no matter how the user tricks it. In this case, the user must have full administrator rights. Are these not mutually exclusive paragraphs? Can something be done?

Answer 1

In this case, the user must have full administrator rights. Are these not mutually exclusive paragraphs? Can something be done?
In general, they are mutually exclusive.
But there are options
a) this is your own program, and you introduce a password to run it, which you do not tell anyone, and the user does not have the opportunity to take this program anywhere else.
b) Put the program on a cryptodisk, which is mounted with a password and the user does not know it
c) Beat the user on the hands every time he starts a forbidden program.
d) The user has all the rights, but computer knowledge is at the level of a complete noob. In this case, you can create all sorts of policies so that he dies in an attempt to google how to turn it all off.

Answer 2

Through group policies. Or local:
https://remontka.pro/block-programs-run-windows/