Block students installing exes

Super Contributor

Hi all,


How do we block students from downloading and installing .exes? I've looked around and its all about blocking certain .exes. I can't make a list of all the possible .exes they might download and install as this could be endless. Anybody who has done this before or knows how to do this?


Thanks in advance

6 Replies
1) First important security measure is remove admin rights. 2) Use Defender Application Control to whitelist the known ones. All unknown ones will be prevented from installing.

You can use Software Restriction Policies.
Check this article for an introduction to Software Restriction Policies:
Hi is there an easy guide to follow to us software Restriction Policies for intune set up
Hi is there a guide to do this? - Defender Application Control to whitelist the known ones
It is an advanced topic, but here is official documentation for your reference,

best response confirmed by AB21805 (Super Contributor)

An old question. But if you are using intune for education