Who rated this post

Hello @s.debus,

This use case could be accomplished via a Restrictions Profile. You can create a new Restrictions Profile by navigating to Endpoints>Policy Management>Prevention>Profiles and clicking "Add Profile."

Under the "Executable Files" section, change the action mode to "Block" and add your desired filepath(s) to the block list. For example, you could add %USERPROFILE%\Downloads\*.exe to specifically block files with the .exe extension, or you could add %USERPROFILE%\Downloads\* to block additional types of executable files as well:

After you have adjusted the profile to your liking, save the profile and make sure it is assigned to the proper endpoint(s) via a Prevention Policy Rule.

I hope that answers your question!

Regards,
Tim