How to detect and block applications with Intune and Defender for Endpoint
You know the problem- you issue corporate laptops to your users for business only, and then sooner or later you see someone playing World of Warcraft.
Don't you hate it when that happens?
Today I'll show you how to detect for unwanted apps in your environment with Defender for Endpoint, and then how to block them from launching or installing with an Intune AppLocker policy.
Join the official Discord server
/ discord
Read more at
https://www.getrubix.com
Chapters
00:00:00:00 Fun with a golf cart
00:01:09:22 Unwanted apps
00:01:45:11 How does it happen?
00:02:25:55 Detect apps in Defender for Endpoint
00:04:28:06 How does applocker work?
00:04:55:11 Create the applocker policy XML
00:07:44:37 Create the Intune policy
00:08:24:33 The OMA-URI
00:09:20:15 Pasting the XML
00:09:53:01 Add an app from a reference folder
00:10:43:07 Test time
00:11:19:02 Block installation too
00:12:07:38 This is common
#intune #autopilot #windows10 #windows11 #microsoftgraph #azureadministrator #azure #powershellscripting #powershell #activedirectory #bitlocker #windows365 #zerotrust #certificate #entra #microsoftdefender #zerotrust #mdm