Publisher Bans

When you ban a publisher, computers in policies affected by that ban cannot run software from that publisher.

You can ban files by publisher when you know that the publisher is a source of malicious files or applications that you do not want running in your environment. When you create a publisher ban, the local state of files from that publisher is changed to Banned. Publisher bans are created manually through the console.

You can ban files by publisher even if they are invalidly signed or do not meet other requirements for approval by publisher.

Caution: Consider all files that might be affected by a publisher ban and be sure that a publisher ban does not inadvertently ban a file that is required in your environment.