# How do I make a script to block all users on a PC from executive .MSI / .exe files?

I have a client that needs to block users from executive .MSI and .EXE files but unfortuinately we're currently unable to do it via Powershell it seems.

##### Post Metadata
- Posted at: about 6 years ago



## Comments
### Comment 1

Make them regular users. 

Do not make their accounts administrators.

##### Comment Metadata
- Posted at: over 3 years ago
- Author title: IT Consultant



### Comment 2

Use Applocker, create a group policy and deploy that way. have a read up on it, and customise a policy, export it, and deploy it that way.

##### Comment Metadata
- Posted at: over 3 years ago
- Author title: Managing Director




## Related Product
[NinjaOne](https://www.g2.com/products/ninjaone/reviews)

## Related Category
[Endpoint Management](https://www.g2.com/categories/endpoint-management)

## Related discussions
- [How well does Trello scale into a larger team?](https://www.g2.com/discussions/1-how-well-does-trello-scale-into-a-larger-team)
  - Posted at: about 13 years ago
  - Comments: 6
- [Can we please add a new section](https://www.g2.com/discussions/2-can-we-please-add-a-new-section)
  - Posted at: about 13 years ago
  - Comments: 0
- [Quantifiable benefits from implementing your CRM](https://www.g2.com/discussions/quantifiable-benefits-from-implementing-your-crm)
  - Posted at: about 13 years ago
  - Comments: 4