Hi @Samer Rustom,
thanks for your question.
It is recommended to create a separate policy for each application you wish to remove. Here's a step-by-step guide:
Log in to the domain controller with administrative privileges.
Open the Group Policy Management console by pressing Win + R, then typing gpmc.msc, and pressing Enter.
Create a new Group Policy Object (GPO) by right-clicking on the desired organizational unit (OU) or domain, then selecting "Create a GPO in this domain, and Link it here."
Give the GPO a descriptive name like "Remove Groove Music."
Right-click the newly created GPO and select "Edit" to open the Group Policy Management Editor.
In the Group Policy Management Editor, navigate to "Computer Configuration" > "Policies" > "Windows Settings" > "Security Settings" > "Software Restriction Policies."
Right-click "Software Restriction Policies" and select "New Software Restriction Policies."
In the right-hand pane, right-click on "Additional Rules" and select "New Path Rule."
Specify the path or file name of the application you want to remove. For example, for Groove Music, you would enter C:\Program Files\WindowsApps\Microsoft.ZuneMusic* (make sure to include the asterisk *).
Choose the security level as "Disallowed" to prevent the application from running.
Close the Group Policy Management Editor.
Apply the GPO to the desired OU or domain by right-clicking on the OU or domain and selecting "Link an Existing GPO."
Select the GPO you created, and click "OK."
Wait for the Group Policy to propagate through the network or force a Group Policy update on the target machines using the command gpupdate /force in an elevated command prompt.
By following these steps, you can create separate policies for each application you want to remove, such as Groove Music, Xbox, Alarm & Clock, etc. Remember to adjust the file paths and names accordingly.
Kindest regards
