What's new 
I’m trying to restrict application downloads and installations on managed Windows devices. The main requirement is to stop users from installing apps through .exe and .msi files, and also prevent app downloads from the Microsoft Store. Is there a Hexnode policy for this, or should this be handled through app blocklists/scripts?
32 Views
Replies (1)
Marked SolutionPending Review
Hexnode Expert
1 week ago
Jul 20, 2026
Marked SolutionPending Review
Hexnode does not currently provide a single Windows policy toggle that blocks all application installations while prompting users for approval.
For Windows devices, you can control application usage and installation behavior using these approaches:
1. Kiosk Mode
Use Kiosk Mode if the device should run only a limited set of approved applications.
2. App Management policies
Use Blocklist/Allowlist rules under Windows app management to control which applications users can launch. This is useful when you want to prevent access to specific apps or allow only approved apps.
3. Custom scripts
If you need to restrict installer execution, such as .exe or .msi files, you can deploy a custom Windows script through Hexnode. A sample script may be used as a starting point for Windows 10 environments, but scripts should be reviewed and modified based on the Windows version and organizational requirements before deployment.
Regards,
Mary Romero
Save