cixxtynine

The best way to block any file in a domain environement is to create a rule in your current default domain group policy : 1. Edit yours. 2. Go in User configuration -> Policies -> Windows Settings -> Security Settings -> Software Restriction Policies -> Additional Rules 3. Create a new Hash Rule. Reference from : Deny Specific Application in Active Directory GPO - TechSultan