Forum Discussion
AB21805
Mar 24, 2021Bronze Contributor
Block students installing exes
Hi all,
How do we block students from downloading and installing .exes? I've looked around and its all about blocking certain .exes. I can't make a list of all the possible .exes they might download and install as this could be endless. Anybody who has done this before or knows how to do this?
Thanks in advance
- Hi,
An old question. But if you are using intune for education
https://call4cloud.nl/2020/06/blocking-administrative-apps-like-the-command-prompt-in-intune/
6 Replies
- Hi,
An old question. But if you are using intune for education
https://call4cloud.nl/2020/06/blocking-administrative-apps-like-the-command-prompt-in-intune/ - Krishna73037Brass ContributorHello,
You can use Software Restriction Policies.
Check this article for an introduction to Software Restriction Policies: http://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx
https://docs.microsoft.com/en-us/windows-server/identity/software-restriction-policies/software-restriction-policies-technical-overview#:~:text=At%20a%20high%20level,%20software%20restriction%20policies%20consist,Directory%20and%20Group%20Policy.%20...%20More%20items...- AB21805Bronze ContributorHi is there an easy guide to follow to us software Restriction Policies for intune set up
- Pa_DBrass Contributor1) First important security measure is remove admin rights. 2) Use Defender Application Control to whitelist the known ones. All unknown ones will be prevented from installing.
- AB21805Bronze ContributorHi is there a guide to do this? - Defender Application Control to whitelist the known ones
- Pa_DBrass ContributorIt is an advanced topic, but here is official documentation for your reference,
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-control/windows-defender-application-control