Disallow application run in Windows Mobile

One of the most demanded feature in Windows Mobile is preventing user to execute specific application. There are several ways to complete this task but the easiest one is always forgotten.

DisallowRun feature

Since windows mobile 2003, there is a possibility to list banned application directly in registry. Add the following key into registry and set it's DWORD value to 1.

[HLKM\Security\Policies\Shell]
"DisallowRun" = 1  (DWORD)

Now the DisallowRun feature is turned on. The banned application list must be created.

[HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\DisallowRun]
"1"="calc.exe"
"2"="notes.exe"

Every banned application is specified as a STRING value of the key with number name.

KeyName: 1 
Type: String 
Value: calc.exe 

KeyName: 2
Type: String 
Value: notes.exe 

Easy isn't it?