Block students installing exes

[AB21805]

Hi all,

How do we block students from downloading and installing .exes? I've looked around and its all about blocking certain .exes. I can't make a list of all the possible .exes they might download and install as this could be endless. Anybody who has done this before or knows how to do this?

Thanks in advance

[#2]

1) First important security measure is remove admin rights. 2) Use Defender Application Control to whitelist the known ones. All unknown ones will be prevented from installing.

[#3]

Hello,

You can use Software Restriction Policies.
Check this article for an introduction to Software Restriction Policies: http://technet.microsoft.com/en-us/magazine/2008.06.srp.aspx
https://docs.microsoft.com/en-us/windows-server/identity/software-restriction-policies/software-rest......

[#4]

Hi is there an easy guide to follow to us software Restriction Policies for intune set up

[#5]

Hi is there a guide to do this? - Defender Application Control to whitelist the known ones

[#6]

It is an advanced topic, but here is official documentation for your reference,
https://docs.microsoft.com/en-us/windows/security/threat-protection/windows-defender-application-con...

[#7 · Accepted solution]

Hi,

An old question. But if you are using intune for education

https://call4cloud.nl/2020/06/blocking-administrative-apps-like-the-command-prompt-in-intune/