Forum Discussion
How are people blocking software/apps in windows 11
Well Software Restriction Policy (SRP) is deprecated since windows 10.
When we try to use AppLocker we get the blue pop-ups to say software has been blocked (but the only way to see what software is in the Event Log), and there's no way to hide this.
We've found it's unusable for exam accounts, because there's so much that is blocked. We didn't have this issue with SRP, because it did it all silently.
What are other people using to block software in Windows 11 ?
1 Reply
In Windows 11, many organizations are shifting to using Windows Defender Application Control (WDAC) or third-party endpoint security solutions for more granular and silent application blocking, as AppLocker can generate disruptive notifications and lacks the silent enforcement capability of the deprecated SRP. WDAC allows administrators to create policies that restrict executable files, scripts, and other content silently, reducing user disruption during enforcement, and can be managed via Group Policy or MDM. Additionally, third-party solutions like Symantec Endpoint Protection, Sophos Intercept X, or Malwarebytes provide customizable application control features, often with better logging and fewer user-facing pop-ups. These tools offer a more seamless and manageable approach to application whitelisting and blacklisting in Windows 11 environments, especially crucial for exam or high-security scenarios where silent blocking is preferred.
