Prevent web app installing to appdata folder

%3CLINGO-SUB%20id%3D%22lingo-sub-2353412%22%20slang%3D%22en-US%22%3EPrevent%20web%20app%20installing%20to%20appdata%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2353412%22%20slang%3D%22en-US%22%3E%3CP%3EHello%3C%2FP%3E%0A%3CP%3EWeb%20apps%20like%20teams%2C%20zoom%2C%20webex%20can%20be%20installed%20without%20admin%20rights.%20This%20to%20me%20is%20a%20bit%20of%20a%20security%20risk.%20Does%20MDE%20have%20a%20tool%20to%20help%20admins%20control%20install%20to%20AppData%20folder%20which%20MS%20has%20allowed%20for%20most%20collaborative%20apps%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2355426%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20web%20app%20installing%20to%20appdata%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2355426%22%20slang%3D%22en-US%22%3EYou%20might%20be%20better%20served%20by%20Applocker%20(%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fwindows-defender-application-control%2Fapplocker%2Fapplocker-overview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows%2Fsecurity%2Fthreat-protection%2Fwindows-defender-application-control%2Fapplocker%2Fapplocker-overview%3C%2FA%3E).%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2355429%22%20slang%3D%22en-US%22%3ERe%3A%20Prevent%20web%20app%20installing%20to%20appdata%20folder%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2355429%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F54698%22%20target%3D%22_blank%22%3E%40Joe%20Stern%3C%2FA%3E%26nbsp%3BWe%20are%20currently%20looking%20at%20Applocker%20or%20Defender%20Application%20control.%20The%20problem%20is%20it%20seems%20to%20only%20prevent%20running%20the%20apps.%20It%20does%20not%20seem%20to%20prevent%20downloads.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Microsoft

Hello

Web apps like teams, zoom, webex can be installed without admin rights. This to me is a bit of a security risk. Does MDE have a tool to help admins control install to AppData folder which MS has allowed for most collaborative apps?

2 Replies

@Joe Stern We are currently looking at Applocker or Defender Application control. The problem is it seems to only prevent running the apps. It does not seem to prevent downloads.