How to Allow Users, Install only Whitelisted Applications on Windows 10

Mr. Sajid 1 Reputation point
2022-02-28T08:18:28.1+00:00

Hello,

I have Windows 10 users joined to Azure AD and I have given all of them Admin rights. This means they can install any software they like. But I want to create a Whitelist of software that allows them to install only those software. So how can I create such a policy in Azure AD which restricts, out of the Whitelisted applications. If it is not possible in Azure then kindly suggest me a solution please.

Thanks,

SY

Windows
Windows
A family of Microsoft operating systems that run across personal computers, tablets, laptops, phones, internet of things devices, self-contained mixed reality headsets, large collaboration screens, and other devices.
4,766 questions
Windows 10 Security
Windows 10 Security
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Security: The precautions taken to guard against crime, attack, sabotage, espionage, or another threat.
2,758 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,549 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. VipulSparsh-MSFT 16,231 Reputation points Microsoft Employee
    2022-03-02T08:15:34.753+00:00

    @Mr. Sajid Thanks for reaching out. As I understand from your problem statement you want to find a way which allows you to control the Application installations on windows 10 environment.

    Currently Azure AD does not have this capability to provide that dedicated endpoint solution. In your particular scenario you will need to use Microsoft Endpoint manager (Known as Intune).
    You will need to enroll your devices (Windows 10) to Intune and then apply policies to control the behaviors.

    For whitelisting Application on windows 10, you can deploy App locker configuration files from Intune service which allows you to control/block the execution of any software on windows 10.

    You can read more here : https://www.vansurksum.com/2020/02/24/a-guide-to-implementing-applocker-on-your-modern-workplace/

    -----------------------------------------------------------------------------------------------------------------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

    0 comments
  2. Andrew Blumhardt 9,496 Reputation points Microsoft Employee
    2022-03-02T08:28:38.493+00:00
    0 comments