Hi.

Tell me please:

SCCM can blocking application like applocker (from group policy) or uninstall?
I can create an uninstall package to handle uninstallation, but this depends on whats installed from SCCM. How about other application?

Thanks.

Hi,

You cannot block an application installation using SCCM, applocker and Group Polciies is the way to do that.

To do an uninstallation you don't have to have installed asn application using sccm, you can always use a package and program without sourcefiles as long as you know the command to uninstall the applicaiton on the local computer.

/Jrgen 

You can control AppLocker. It's a bit of a round about way, but it is possible and as simple as using the PowerShell cmdlets: https://technet.microsoft.com/en-us/library/hh847210.aspx?f=255&MSPPError=-2147217396

I discussed this during my System Center Universe 2015 session a couple of months back (I don't remember if I demoed it or not though): http://channel9.msdn.com/Events/System-Center/System-Center-Universe-2015/Enterprise-Security-with-Configuration-Manager. It's not overly difficult.

Thanks!