How to prevent programs from making new entries in task scheduler when installing them on windows?












4















how can you prevent programs from making new entries in task scheduler or new startup entries when you install them like flash or acrobat reader?
I want to block this or better: they should ask for my permission.



I am on my Desktop PC with win7 and i am the admin. But i dont always want to check if programs do new entries when installing or updating them.



i hope you understand what i mean ;)



cheers
john










share|improve this question



























    4















    how can you prevent programs from making new entries in task scheduler or new startup entries when you install them like flash or acrobat reader?
    I want to block this or better: they should ask for my permission.



    I am on my Desktop PC with win7 and i am the admin. But i dont always want to check if programs do new entries when installing or updating them.



    i hope you understand what i mean ;)



    cheers
    john










    share|improve this question

























      4












      4








      4








      how can you prevent programs from making new entries in task scheduler or new startup entries when you install them like flash or acrobat reader?
      I want to block this or better: they should ask for my permission.



      I am on my Desktop PC with win7 and i am the admin. But i dont always want to check if programs do new entries when installing or updating them.



      i hope you understand what i mean ;)



      cheers
      john










      share|improve this question














      how can you prevent programs from making new entries in task scheduler or new startup entries when you install them like flash or acrobat reader?
      I want to block this or better: they should ask for my permission.



      I am on my Desktop PC with win7 and i am the admin. But i dont always want to check if programs do new entries when installing or updating them.



      i hope you understand what i mean ;)



      cheers
      john







      windows-7 windows permissions firewall scheduled-tasks






      share|improve this question













      share|improve this question











      share|improve this question




      share|improve this question










      asked Jun 25 '17 at 9:22









      ali3ali3

      212




      212






















          1 Answer
          1






          active

          oldest

          votes


















          1














          Prevent Applications from Creating Startup Entries and Scheduled Tasks



          Prevent apps from creating startup entries as follows:





          1. Deny your user account the Create files / write data NTFS permission to the following folders:




            • %ProgramData%MicrosoftWindowsStart MenuProgramsStartup

            • %AppData%MicrosoftWindowsStart MenuProgramsStartup

            • %SystemRoot%Tasks




          2. Deny your user account the Set Value Registry permission to the following locations:




            • HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun

            • HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun

            • HKCUSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)

            • HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)




          This covers some of the more common startup locations in the file system and the Registry. However, for a truly comprehensive lockdown, you'd need to do this to all of the Startup locations. And there's lots of them.



          If you use a different account than your own to install or update software, deny the above permissions to whatever account will be used.



          You may also have to set these permissions for the SYSTEM account, as some programs will run their installation routines in that account's context instead of the account that started the installation. It's also possible other user identities may be used, in which case you'd need to deny permissions to those accounts as well. If you run into either of these cases, you may wish to ask yourself if fiddling with these permissions is worthwhile versus simply reviewing startup entries after program installation.






          How can you prevent programs from making new entries in task scheduler or new startup entries....or better: they should ask for my permission.




          Blocking creation of startup entries is one thing. Configuring Windows to ask you before allowing an application to perform one or two of tens out of thousands of operations executed during software installation or update is another story. If you really want to get this granular, some security programs can be configured to monitor Windows' Startup locations and notify you when a program modifies them.



          Personally after installing a program I prefer to review changes made to my startup entries using Microsoft's AutoRuns utility. As for updating programs, I find it rare that new Startup entries get created. The one exception is that programs will re-create startup entries I've disabled if they were part of the original installation.






          share|improve this answer























            Your Answer








            StackExchange.ready(function() {
            var channelOptions = {
            tags: "".split(" "),
            id: "3"
            };
            initTagRenderer("".split(" "), "".split(" "), channelOptions);

            StackExchange.using("externalEditor", function() {
            // Have to fire editor after snippets, if snippets enabled
            if (StackExchange.settings.snippets.snippetsEnabled) {
            StackExchange.using("snippets", function() {
            createEditor();
            });
            }
            else {
            createEditor();
            }
            });

            function createEditor() {
            StackExchange.prepareEditor({
            heartbeatType: 'answer',
            autoActivateHeartbeat: false,
            convertImagesToLinks: true,
            noModals: true,
            showLowRepImageUploadWarning: true,
            reputationToPostImages: 10,
            bindNavPrevention: true,
            postfix: "",
            imageUploader: {
            brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
            contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
            allowUrls: true
            },
            onDemand: true,
            discardSelector: ".discard-answer"
            ,immediatelyShowMarkdownHelp:true
            });


            }
            });














            draft saved

            draft discarded


















            StackExchange.ready(
            function () {
            StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1222551%2fhow-to-prevent-programs-from-making-new-entries-in-task-scheduler-when-installin%23new-answer', 'question_page');
            }
            );

            Post as a guest















            Required, but never shown

























            1 Answer
            1






            active

            oldest

            votes








            1 Answer
            1






            active

            oldest

            votes









            active

            oldest

            votes






            active

            oldest

            votes









            1














            Prevent Applications from Creating Startup Entries and Scheduled Tasks



            Prevent apps from creating startup entries as follows:





            1. Deny your user account the Create files / write data NTFS permission to the following folders:




              • %ProgramData%MicrosoftWindowsStart MenuProgramsStartup

              • %AppData%MicrosoftWindowsStart MenuProgramsStartup

              • %SystemRoot%Tasks




            2. Deny your user account the Set Value Registry permission to the following locations:




              • HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun

              • HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun

              • HKCUSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)

              • HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)




            This covers some of the more common startup locations in the file system and the Registry. However, for a truly comprehensive lockdown, you'd need to do this to all of the Startup locations. And there's lots of them.



            If you use a different account than your own to install or update software, deny the above permissions to whatever account will be used.



            You may also have to set these permissions for the SYSTEM account, as some programs will run their installation routines in that account's context instead of the account that started the installation. It's also possible other user identities may be used, in which case you'd need to deny permissions to those accounts as well. If you run into either of these cases, you may wish to ask yourself if fiddling with these permissions is worthwhile versus simply reviewing startup entries after program installation.






            How can you prevent programs from making new entries in task scheduler or new startup entries....or better: they should ask for my permission.




            Blocking creation of startup entries is one thing. Configuring Windows to ask you before allowing an application to perform one or two of tens out of thousands of operations executed during software installation or update is another story. If you really want to get this granular, some security programs can be configured to monitor Windows' Startup locations and notify you when a program modifies them.



            Personally after installing a program I prefer to review changes made to my startup entries using Microsoft's AutoRuns utility. As for updating programs, I find it rare that new Startup entries get created. The one exception is that programs will re-create startup entries I've disabled if they were part of the original installation.






            share|improve this answer




























              1














              Prevent Applications from Creating Startup Entries and Scheduled Tasks



              Prevent apps from creating startup entries as follows:





              1. Deny your user account the Create files / write data NTFS permission to the following folders:




                • %ProgramData%MicrosoftWindowsStart MenuProgramsStartup

                • %AppData%MicrosoftWindowsStart MenuProgramsStartup

                • %SystemRoot%Tasks




              2. Deny your user account the Set Value Registry permission to the following locations:




                • HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun

                • HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun

                • HKCUSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)

                • HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)




              This covers some of the more common startup locations in the file system and the Registry. However, for a truly comprehensive lockdown, you'd need to do this to all of the Startup locations. And there's lots of them.



              If you use a different account than your own to install or update software, deny the above permissions to whatever account will be used.



              You may also have to set these permissions for the SYSTEM account, as some programs will run their installation routines in that account's context instead of the account that started the installation. It's also possible other user identities may be used, in which case you'd need to deny permissions to those accounts as well. If you run into either of these cases, you may wish to ask yourself if fiddling with these permissions is worthwhile versus simply reviewing startup entries after program installation.






              How can you prevent programs from making new entries in task scheduler or new startup entries....or better: they should ask for my permission.




              Blocking creation of startup entries is one thing. Configuring Windows to ask you before allowing an application to perform one or two of tens out of thousands of operations executed during software installation or update is another story. If you really want to get this granular, some security programs can be configured to monitor Windows' Startup locations and notify you when a program modifies them.



              Personally after installing a program I prefer to review changes made to my startup entries using Microsoft's AutoRuns utility. As for updating programs, I find it rare that new Startup entries get created. The one exception is that programs will re-create startup entries I've disabled if they were part of the original installation.






              share|improve this answer


























                1












                1








                1







                Prevent Applications from Creating Startup Entries and Scheduled Tasks



                Prevent apps from creating startup entries as follows:





                1. Deny your user account the Create files / write data NTFS permission to the following folders:




                  • %ProgramData%MicrosoftWindowsStart MenuProgramsStartup

                  • %AppData%MicrosoftWindowsStart MenuProgramsStartup

                  • %SystemRoot%Tasks




                2. Deny your user account the Set Value Registry permission to the following locations:




                  • HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun

                  • HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun

                  • HKCUSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)

                  • HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)




                This covers some of the more common startup locations in the file system and the Registry. However, for a truly comprehensive lockdown, you'd need to do this to all of the Startup locations. And there's lots of them.



                If you use a different account than your own to install or update software, deny the above permissions to whatever account will be used.



                You may also have to set these permissions for the SYSTEM account, as some programs will run their installation routines in that account's context instead of the account that started the installation. It's also possible other user identities may be used, in which case you'd need to deny permissions to those accounts as well. If you run into either of these cases, you may wish to ask yourself if fiddling with these permissions is worthwhile versus simply reviewing startup entries after program installation.






                How can you prevent programs from making new entries in task scheduler or new startup entries....or better: they should ask for my permission.




                Blocking creation of startup entries is one thing. Configuring Windows to ask you before allowing an application to perform one or two of tens out of thousands of operations executed during software installation or update is another story. If you really want to get this granular, some security programs can be configured to monitor Windows' Startup locations and notify you when a program modifies them.



                Personally after installing a program I prefer to review changes made to my startup entries using Microsoft's AutoRuns utility. As for updating programs, I find it rare that new Startup entries get created. The one exception is that programs will re-create startup entries I've disabled if they were part of the original installation.






                share|improve this answer













                Prevent Applications from Creating Startup Entries and Scheduled Tasks



                Prevent apps from creating startup entries as follows:





                1. Deny your user account the Create files / write data NTFS permission to the following folders:




                  • %ProgramData%MicrosoftWindowsStart MenuProgramsStartup

                  • %AppData%MicrosoftWindowsStart MenuProgramsStartup

                  • %SystemRoot%Tasks




                2. Deny your user account the Set Value Registry permission to the following locations:




                  • HKCUSOFTWAREMicrosoftWindowsCurrentVersionRun

                  • HKLMSOFTWAREMicrosoftWindowsCurrentVersionRun

                  • HKCUSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)

                  • HKLMSOFTWAREWow6432NodeMicrosoftWindowsCurrentVersionRun (64-bit OS only)




                This covers some of the more common startup locations in the file system and the Registry. However, for a truly comprehensive lockdown, you'd need to do this to all of the Startup locations. And there's lots of them.



                If you use a different account than your own to install or update software, deny the above permissions to whatever account will be used.



                You may also have to set these permissions for the SYSTEM account, as some programs will run their installation routines in that account's context instead of the account that started the installation. It's also possible other user identities may be used, in which case you'd need to deny permissions to those accounts as well. If you run into either of these cases, you may wish to ask yourself if fiddling with these permissions is worthwhile versus simply reviewing startup entries after program installation.






                How can you prevent programs from making new entries in task scheduler or new startup entries....or better: they should ask for my permission.




                Blocking creation of startup entries is one thing. Configuring Windows to ask you before allowing an application to perform one or two of tens out of thousands of operations executed during software installation or update is another story. If you really want to get this granular, some security programs can be configured to monitor Windows' Startup locations and notify you when a program modifies them.



                Personally after installing a program I prefer to review changes made to my startup entries using Microsoft's AutoRuns utility. As for updating programs, I find it rare that new Startup entries get created. The one exception is that programs will re-create startup entries I've disabled if they were part of the original installation.







                share|improve this answer












                share|improve this answer



                share|improve this answer










                answered Aug 3 '17 at 1:24









                Twisty ImpersonatorTwisty Impersonator

                18.4k146599




                18.4k146599






























                    draft saved

                    draft discarded




















































                    Thanks for contributing an answer to Super User!


                    • Please be sure to answer the question. Provide details and share your research!

                    But avoid



                    • Asking for help, clarification, or responding to other answers.

                    • Making statements based on opinion; back them up with references or personal experience.


                    To learn more, see our tips on writing great answers.




                    draft saved


                    draft discarded














                    StackExchange.ready(
                    function () {
                    StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1222551%2fhow-to-prevent-programs-from-making-new-entries-in-task-scheduler-when-installin%23new-answer', 'question_page');
                    }
                    );

                    Post as a guest















                    Required, but never shown





















































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown

































                    Required, but never shown














                    Required, but never shown












                    Required, but never shown







                    Required, but never shown







                    Popular posts from this blog

                    Сан-Квентин

                    Алькесар

                    Josef Freinademetz