How to restrict unapproved app installations on Windows devices using Hexnode?Solved

Participant
Discussion
2 weeks ago Jun 18, 2026

Is there a way to stop users from installing applications or software on Windows devices unless the IT/security team has approved them?

I’m looking for something like an app installation approval flow in Hexnode. Most of our devices are Windows Pro, with a few Windows Home devices. Ideally, users should only be able to install approved apps, and we may also need exceptions for specific devices later.

Replies (2)

Marked SolutionPending Review
Hexnode Expert
2 weeks ago Jun 18, 2026
Marked SolutionPending Review

Hi @eduardo,

Hexnode does not currently provide an interactive app installation approval workflow where a user requests permission and an admin approves each installation.

However, you can control Windows app installations using a combination of approved app deployment and app restrictions:

  1. Use App Catalog for approved apps
    1. Go to Policies > Create New Policy.
    2. Select Windows as the platform.
    3. Navigate to App Management > App Catalog.
    4. Add the applications that users are allowed to install.
    5. Save and deploy the policy to the required Windows devices.

    This gives users access to a self-service catalog containing only admin-approved applications.

  2. Use Blocklist/Allowlist to restrict other apps
    1. In the same or another Windows policy, go to App Management > Blocklist/Allowlist.
    2. Use Allowlist if you want only selected applications to be allowed.
    3. Use Blocklist if you only want to prevent specific applications from running.

    For a stricter setup, Allowlist is usually the better option because only approved applications are permitted.

For Windows devices, policy-based control is generally more reliable on Windows Pro or Enterprise editions. Windows Home has limited support for many management policies, so it may not enforce the same restrictions effectively.

Regards,
Sienna Carter
Hexnode UEM

Marked SolutionPending Review
Participant
2 weeks ago Jun 18, 2026
Marked SolutionPending Review

Thanks, will try this.

Save