Unfortunately there is no simple GUI option to block the Command Prompt/Windows Powershell and Regedit in intune.  Guess what? That’s wrong. You can make sure these apps can be denied. To do so, open the education Intune portal instead of the normal Intune portal. https://intuneeducation.portal.azure.com/ Groups –> All Devices (or create a custom group) –> Settings –>Windows Device Settings –> Apps –> Block Access to administrative apps Guess what it does? It just creates a custom Applocker policy in your … Continue reading Blocking Administrative Apps like the Command Prompt In Intune.