It seems like you’re trying to allow specific software to run and install using Group Policy, but you’re having trouble finding the right configuration. Here are some steps you can take:
Allowing Specific Software to Run and Install:
In the Group Policy Editor, navigate to User Configuration > Policies > Software Settings > Software installation.
Go to New > Package....
Select the Advanced option and then change the Deployment type to Published.
This will give your users an option to install the program via Add/Remove Programs.
Preventing the Blockage of CMD and PowerShell:
The Run only specified Windows applications policy in Group Policy can indeed prevent the running of certain applications, including CMD and PowerShell. If you want to allow these applications to run, you need to add cmd.exe and powershell.exe to the list of allowed applications in the policy.