You try to open a program on your Windows 11 PC, but Windows refuses to launch it and displays “This program is blocked by group policy. For more information, contact your system administrator” (Error Code: 0x00704ec). This error usually means a Windows security policy is preventing the program from running. Group Policy can restrict specific applications through settings such as Software Restriction Policies (SRP) or AppLocker rules. On a work or school computer, an administrator may have intentionally applied the restriction. On a personal PC, an incorrect policy, third-party security software, or leftover settings from an old configuration can sometimes cause the problem. If you’re using a personal Windows 11 PC and the blocked program is from a trusted source, here is how to fix it.
Why Is a Program Blocked by Group Policy in Windows 11?
Windows uses Group Policy to control what users and applications can do on a computer. When a policy is configured to prevent a particular program from running, Windows displays the “This program is blocked by Group Policy” message.
The restriction can come from several places, depending on how the computer is configured:
- Software Restriction Policies (SRP): These rules can prevent specific programs, file types, or locations from running.
- AppLocker rules: Windows can use AppLocker to allow or block applications based on their publisher, file path, or other properties.
- Local Group Policy settings: A policy may have been changed manually or by another program.
- Organization policies: Work and school computers may have restrictions configured by an IT administrator.
- Security software: Some antivirus or security applications can prevent certain programs from running.
- Leftover policies: If your PC was previously part of a domain or organization, old group policies may still be active.
If you’re using a company or school PC, don’t try to remove a restriction without permission. The policy may be intentional.
If this is your personal Windows 11 PC, you can check the policies affecting the program and work through the solutions below.
1. Check Whether Your PC Is Managed by an Organization
Before changing Group Policy settings, check whether your Windows 11 PC is connected to a work or school account. An organization can use Group Policy to block specific programs, and changing the setting yourself may not permanently remove the restriction.
- Press Windows + I to open Settings.
- Go to Accounts > Access work or school.
- Check whether a work or school account is connected.
- If this is a company or school computer, contact your administrator before changing any security policies.
- If it is your personal PC and you no longer need the connected account, select it and choose Disconnect, if available.
If your personal PC is not managed by an organization, continue with the next method.
Note: Don’t disconnect a work or school account simply to bypass a security restriction. It can remove access to organizational resources and may not resolve the underlying policy.
2. Run the Program as an Administrator
Sometimes a program is blocked because your Windows account does not have the permissions it needs to run it. Running the program with administrator privileges is a quick way to check whether permissions are involved.
- Right-click the program or its shortcut.
- Select Run as administrator.
- Click Yes if the User Account Control prompt appears.
- Check whether the program opens.
If you still see “This program is blocked by group policy,” the problem is likely due to a policy restriction rather than normal user permissions. Continue with the next method.
3. Update Group Policy Settings
If a Group Policy setting was recently changed, Windows may still be using an older policy configuration. You can force Windows 11 to refresh its Group Policy settings and then check the program again.
- Press Windows + X and select Terminal (Admin).
- Click Yes when the User Account Control prompt appears.
- Type the following command and press Enter:
gpupdate /force
- Wait until Windows reports that the policy update has completed.
- Restart your PC.
- Try opening the blocked program again.
If the message still appears, a specific policy may be configured to block the program. Continue with the next method.
4. Check Software Restriction Policies
Windows can use Software Restriction Policies (SRP) to prevent certain programs from running. If an SRP rule was added accidentally or left behind by older software, it can cause the “This program is blocked by Group Policy” error on a personal Windows 11 PC.
Note: The Local Group Policy Editor is not available in Windows 11 Home.
If you have Windows 11 Pro, Enterprise, or Education:
- Press Windows + R type
gpedit.mscand press Enter. - Go to:
Computer Configuration > Windows Settings > Security Settings > Software Restriction Policies - If you see policies listed under Software Restriction Policies, check whether any Disallowed rules are blocking the program.
- If the restriction was recently added and you know it is safe to remove, review or change the relevant rule.
- Restart Windows and try opening the program again.
If no Software Restriction Policies are configured, or you cannot find a rule related to the blocked program, continue with the next method.
5. Check AppLocker Rules
AppLocker is another Windows feature that can control which applications users are allowed to run. If an AppLocker rule blocks the program, Windows may display the “This program is blocked by Group Policy” message.
You can check whether AppLocker is configured on your Windows 11 PC.
- Press Windows + R, type
secpol.msc, and press Enter. - In Local Security Policy, expand Application Control Policies.
- Select AppLocker.
- Check Executable Rules and Windows Installer Rules for rules that may block the affected program.
If you find a rule that you created yourself and it clearly blocks the application, you can review or remove it.
If AppLocker contains rules that were configured by your organization, don’t delete or modify them. Those rules may be required for security or compliance.
Note: AppLocker management options depend on your Windows edition and configuration. If
secpol.mscisn’t available, skip this method and continue with the next solution.
6. Check the Windows Registry for a Software Restriction Policy
If the Group Policy Editor does not show an obvious restriction, a Software Restriction Policy may be stored in the Windows Registry. This can happen after a policy was configured manually or by security software.
Before changing the Registry, create a backup or restore point so you can undo the change if something goes wrong.
- Press Windows + R, type
regedit, and press Enter. - Click Yes when User Account Control appears.
- Go to:
HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer\CodeIdentifiers
- Look for entries that define software restriction rules.
- If you find a restriction you recognize as causing the problem, review it before making any changes.
- Restart your PC and try opening the program again.
Important: Don’t delete Registry entries just because they look unfamiliar. Incorrect Registry changes can cause Windows or other applications to stop working. If you’re not sure which entry is responsible, leave it unchanged and continue with the next method.
7. Check Third-Party Antivirus or Security Software
If you have a third-party antivirus or security program installed, it may be blocking the application independently of Windows Group Policy. This is especially worth checking if the problem started after installing or updating security software.
Open your antivirus or security program and look for blocked applications, application control, quarantine, or protection history. If the program appears there and you trust it, follow the software’s option to allow or restore it.
After making the change, restart Windows and try opening the program again.
Important: Don’t permanently disable your antivirus just to bypass the error. If you’re unsure why the program was blocked, verify that you downloaded it from the developer’s official website first.
8. Scan Windows 11 for Malware
If you didn’t intentionally configure any Group Policy restrictions, malware could be responsible for changing Windows security settings. Some malicious programs modify policies to prevent security tools, system utilities, or other programs from running.
Run a full scan with Windows Security:
- Open Settings > Privacy & security > Windows Security.
- Click Virus & threat protection.
- Select Scan options.
- Choose Full scan and click Scan now.
- Allow Windows Security to remove or quarantine anything it detects.
- Restart your PC and try opening the blocked program again.
If the program is still blocked after the scan, the restriction may be coming from a manually configured policy or another Windows setting rather than malware.
Frequently Asked Questions
It usually means a Group Policy, Software Restriction Policy, or AppLocker rule is preventing the program from running. On work or school PCs, an administrator may have intentionally applied the restriction.
If it is your personal PC, check the relevant Group Policy or AppLocker settings for a rule blocking the program. Avoid changing policies on a work or school computer without permission from your administrator.
An incorrect policy setting, leftover organization policy, third-party security software, Registry change, or malware can cause the error even on a personal computer.
Yes. You can try refreshing Group Policy, checking your security software, scanning for malware, or checking whether the PC is connected to a work or school account. Some Windows 11 editions also do not include the Group Policy Editor.
Changing Group Policy can affect Windows security and other applications. Only change a policy when you understand what it controls, and avoid modifying policies on an organization-managed PC without permission.
