How to create a policy to block users download executable files using Intune/Microsoft defender for Endpoint

Question

I`m participating in a Microsoft Defender for Endpoint project, and in the requirements definition section, it is written as "block download of executable file". How can I make Policy for this? I have searched extensively, but I could not find a clear answer.

Answer 1

@Munkh, Thanks for posting in Q&A. Based on my researching, I didn't find the policy in Intune to block download executable files. I only find the way to block exe on windows devices. Here is a link with more details:

https://www.tenforums.com/tutorials/124008-use-applocker-allow-block-executable-files-windows-10-a.html

Note: Non-Microsoft link, just for the reference.

You can contact Microsoft defender for Endpoint support to see if there's any policy can do this on it.

https://learn.microsoft.com/en-us/microsoft-365/security/defender-endpoint/contact-support?view=o365-worldwide

Thanks for your understanding.

---

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.