Forum Discussion

AB21805's avatar
AB21805
Bronze Contributor
Mar 24, 2021
Solved

Block students installing exes

Hi all,

 

How do we block students from downloading and installing .exes? I've looked around and its all about blocking certain .exes. I can't make a list of all the possible .exes they might download and install as this could be endless. Anybody who has done this before or knows how to do this?

 

Thanks in advance

6 Replies

  • Krishna73037's avatar
    Krishna73037
    Brass Contributor
    Hello,

    You can use Software Restriction Policies.
    Check this article for an introduction to Software Restriction Policies: http://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx
    https://docs.microsoft.com/en-us/windows-server/identity/software-restriction-policies/software-restriction-policies-technical-overview#:~:text=At%20a%20high%20level,%20software%20restriction%20policies%20consist,Directory%20and%20Group%20Policy.%20...%20More%20items...
    • AB21805's avatar
      AB21805
      Bronze Contributor
      Hi is there an easy guide to follow to us software Restriction Policies for intune set up
  • Pa_D's avatar
    Pa_D
    Brass Contributor
    1) First important security measure is remove admin rights. 2) Use Defender Application Control to whitelist the known ones. All unknown ones will be prevented from installing.
    • AB21805's avatar
      AB21805
      Bronze Contributor
      Hi is there a guide to do this? - Defender Application Control to whitelist the known ones
      • Pa_D's avatar
        Pa_D
        Brass Contributor
        It is an advanced topic, but here is official documentation for your reference,
        https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control