Forum Discussion
How are people blocking software/apps in windows 11
In Windows 11, many organizations are shifting to using Windows Defender Application Control (WDAC) or third-party endpoint security solutions for more granular and silent application blocking, as AppLocker can generate disruptive notifications and lacks the silent enforcement capability of the deprecated SRP. WDAC allows administrators to create policies that restrict executable files, scripts, and other content silently, reducing user disruption during enforcement, and can be managed via Group Policy or MDM. Additionally, third-party solutions like Symantec Endpoint Protection, Sophos Intercept X, or Malwarebytes provide customizable application control features, often with better logging and fewer user-facing pop-ups. These tools offer a more seamless and manageable approach to application whitelisting and blacklisting in Windows 11 environments, especially crucial for exam or high-security scenarios where silent blocking is preferred.