Windows 10: how to disable run via search on Windows 10?

We are trying to prevent our users from running various commands that we don't specifically approve. We have implemented Applocker, but that doesn't prevent the user from running commands beginning with rundll32.exe or regsrv32.exe. In previous versions of Windows the group policy setting "Remove Run menu from Start Menu" was sufficient. But in Windows 10, when a user starts typing any command in search, even with that GP setting enforced, the command runs.

Is there any way to prevent this? It is a significant security issue, and I am surprised that Windows 10, which is generally more secure, in this issue is actually less so.

If not, is there at least a way I can prevent access to the search field? I've already found it on the task bar (even if I set it to "hidden", the user can switch it back to "show search icon" or "show search box"), in the alphabetical list of programs (under "Search") and via the Windows+S and Windows+Q hotkeys.

I tried renaming the folder C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy

That did disable the search function entirely, but it went too far for our needs. It would prevent the users from running their programs from the Start Menu. For example, they couldn't just start typing "Word" and have Microsoft Word open.

Any ideas will be welcome.

Thanks!

David

:)

 

Windows search won't stop (attempting to fix 100% disk usage)

My new windows 10 machine is running very slowly, showing 100% disk usage in task manager. If I kill windows search, the usage drops momentarily but search appears again and the disk usage returns to 100%. I've tried killing from powershell (admin) and I
get "windows search was stopped successfully" but it's still there in task manager.

Disabling windows search from services manager doesn't work either.

I disabled search service and restarted, now the search service shows disabled but the search icon is still on the taskbar and the service is still running in task manager. How can I turn it off?

 

Windows 10 Update stuck at 81%

disable the automatic update via the "services" or "services.msc". search it on start menu. run it as administrator (also works even if it is run normally by just clicking but just run it as admin anyway) then scroll down to windows update. right click.
properties. change automatic to "disable". then apply. it's what i do to stop updates

 

curwin,

Welcome to TenForums!


Have you tried to Enable/Disable Run commands using the Registry?

Enable/Disable Run Commands Specific to the Registry