Remedion

Application control

Let users work—without letting installs or USB storage run wild.

Remedion application control enforces software and USB policy on Windows endpoints: lock down installers, block external USB storage unless approved, deploy fleet ScreenSaver settings, maintain approved software lists, and route exceptions through an auditable approval workflow—without a separate EPM or DLP product.

Application control · Finance policy
Lockdown active

Assets covered

248

Approved titles

36

USB lockdown

On

Approved software lists

  • Google Chrome

    Google

    Global list

  • Microsoft Teams

    Microsoft

    Global list

  • 7-Zip

    Igor Pavlov

    Per-asset

User approval queue

  • Slack

    jsmith

    Pending review

  • USB · Kingston DataTraveler

    jsmith

    Pending review

  • Visual Studio Code

    adev

    Approved

On-device prompt

Remedion branded helper · user session

Install not allowed without approval

Software: Slack

Explain why you need this software. Your request is sent to IT for review on this PC only.

CancelRequest approval

USB storage · FINANCE-LAP-12

  • Kingston DataTraveler 3.0Blocked
  • Samsung T7 ShieldApproved

Block MSI, winget and setup.exe for standard users

USB storage lockdown with per-device approve/revoke

Portal deployments bypass lockdown during approved jobs

  • Stop shadow installs at the endpoint

    Block MSI, winget, and common installer names for standard users while keeping portal-driven remediation on the rails.

  • USB storage lockdown

    Block external USB storage on covered PCs by policy. Approve individual devices per asset from Hardware when a role truly needs one.

  • Fleet ScreenSaver policy

    Deploy lock-screen timeout, secure ScreenSaver, and optional branded images across Windows endpoints—group-assigned like other Application Control policies.

  • Reusable approved software lists

    Define global allowlists once, attach them to policies, and add per-asset exceptions when a role needs something unique.

  • User-driven approval workflow

    When someone needs new software—or a USB device—a branded on-screen prompt collects a business reason and opens a review queue for IT.

  • Run blocking for stricter estates

    Optional execution lockdown stops unapproved binaries outside trusted install locations—not just installers.

Portal software deployments and approved remediation jobs can temporarily relax lockdown so IT-led changes still complete cleanly.

See this in a live demo

Walk through the portal with our team and map Remedion to your estate.

Book a demo