Allow specific software run and installation through group policy

Rubiat Rafi 6 Reputation points
2023-11-04T07:18:03.29+00:00

Hello, I want to allow specific software to run and install but I couldn't find any gpo for this configuration. I tried Run only specific windows application gpo but It was preventing me to install the same application and also when I applied it, I can't also run cmd or powershell. So, please suggest me any group policy to achieve my goal. Thanks in advance.

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,089 questions
Active Directory
Active Directory
A set of directory-based technologies included in Windows Server.
5,170 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Wesley Li-MSFT 4,346 Reputation points Microsoft Vendor
    2023-11-08T07:55:32.5+00:00

    Hello

    It seems like you’re trying to allow specific software to run and install using Group Policy, but you’re having trouble finding the right configuration. Here are some steps you can take:

    Allowing Specific Software to Run and Install:

    In the Group Policy Editor, navigate to User Configuration > Policies > Software Settings > Software installation.

    Go to New > Package....

    Select the Advanced option and then change the Deployment type to Published.

    This will give your users an option to install the program via Add/Remove Programs.

    Preventing the Blockage of CMD and PowerShell:

    The Run only specified Windows applications policy in Group Policy can indeed prevent the running of certain applications, including CMD and PowerShell. If you want to allow these applications to run, you need to add cmd.exe and powershell.exe to the list of allowed applications in the policy.

    0 comments