Unfortunately there is no simple GUI option to block the Command Prompt/Windows Powershell and Regedit in intune.  Guess what? That’s wrong. You can make sure these apps can be denied. To do so, open the education Intune portal instead of the normal Intune portal. https://intuneeducation.portal.azure.com/ Groups –> All Devices (or create a custom group) –> Settings –> Apps –> Block Access to administrative apps Guess what it does? It just creates a custom Applocker policy in your normal Intune Portal. … Continue reading Blocking Administrative Apps like the Command Prompt In Intune.