# Configure Prohibited Software

1. [Adding Prohibited Software](https://www.manageengine.com/products/desktop-central/help/inventory/configure_prohibited_software.html#adding_prohibited_software)
2. [Removing Prohibited Software](https://www.manageengine.com/products/desktop-central/help/inventory/configure_prohibited_software.html#removing_prohibited_software)
3. [Configuring Auto-Uninstallion Policy](https://www.manageengine.com/products/desktop-central/help/inventory/configure_prohibited_software.html#configuring_policy)
4. [Exclude Computers from Software Uninstallation](https://www.manageengine.com/products/desktop-central/help/inventory/configure_prohibited_software.html#exempt_computers)
5. [Approving requests to use prohibited software.](https://www.manageengine.com/products/desktop-central/help/inventory/configure_prohibited_software.html#approval_request)
6. [Configuring Global Exclusion](https://www.manageengine.com/products/desktop-central/help/inventory/configure_prohibited_software.html#Configuring-Global-Exclusion)

Every organization prohibits employees from using certain software. Endpoint Central MSP helps prohibit usage of certain software in accordance with your company policies. Detecting such prohibited software will help tackle compliance issues that might otherwise pop up. Endpoint Central MSP provides an option to add the list of software that are prohibited in the company. You can also configure and receive notifications through email and take the necessary action.

The auto-uninstall feature allows you to automatically remove the software within a specified time frame once it is detected on the client machine. However, you can also exempt certain computers from the auto-uninstallation routine.

## Adding prohibited software

You can add the list of software that is prohibited in the company to be detected during regular scan cycles. Follow the steps given below to add prohibited software to the list:

1. Click the **Inventory** tab to view the Inventory Summary.
2. Click the **Configure Prohibited Software** link from the left pane under Application Control. This will list the details of all the software that are already prohibited.
3. Click **Add Prohibited Software**. This opens the Add Prohibited Software dialog listing all the software detected in the managed computers. You should have [scanned the Windows systems](https://www.manageengine.com/desktop-management-msp/help/inventory/scan_systems_for_inventory.html#inventory-scanning) at least once to have the software details listed here.
4. Select the software that you wish to prohibit and move it to the Prohibited List.  
   **Note:** If you have grouped certain software and you are adding that Software Group under the Prohibited Software List, then all the software in that group will be added.
5. After adding all the software, click **Update**. The software gets added to the prohibited list.

## Removing prohibited software

To remove prohibited software:

1. Select the software that you wish to remove from the prohibited list.
2. Click **Remove Prohibited Software** to eliminate the selected software from the prohibited software list.

## Configuring the Auto-Uninstallion Policy

The Auto-Uninstall Policy helps you automatically uninstall detected prohibited software from client machines. The uninstallation will happen during the subsequent refresh cycle.

Follow the steps below to configure the Auto-Uninstall Policy:

1. Select the **Auto-Uninstall Policy** tab.
2. Select the **Enable Automatic Uninstallation** checkbox.
3. Specify the maximum number of software that can be uninstalled from a computer during the subsequent refresh cycle.  

   **Note:** Increasing this number will cause high CPU usage during uninstallation. If the detected prohibited software count exceeds the specified limit on a computer, the exceeding number of software will be uninstalled during the subsequent refresh cycle.
4. Select the **Notify User before Uninstalling** checkbox and specify a custom message if you want to prompt the user before software uninstallation.  

   **Note:** The user will be notified with an alert message during logon and whenever the agent detects prohibited software. This functionality is applicable only if the **Notify User Settings** is configured.
5. Specify the wait window for the software uninstallation. For example, if you want to remove the software three days after it has been detected, enter 3 in the text box provided.
6. Click **Save** to save the changes.

**Note:** Auto-Uninstallation is available by default for **.msi** applications. For **.exe** applications, silent switches are required. The following steps guide you through the auto-uninstallation of **.exe** based software applications.

1. Select the **Prohibited SW** tab.
2. Click the **Not Configured** link under **Uninstall command** against the **.exe** application that needs to be uninstalled.
3. The **Add/Edit Uninstall Command** window pops up.
4. Choose **Pre-fill Uninstall Command** or **I will specify myself**.  

   - **Pre-fill Uninstall Command**: Fetches the uninstall command of the application from Add/Remove Programs and displays it here. Only the silent switch needs to be specified.  
   - **I will specify myself**: Enter the uninstall command and silent switch manually. It is recommended to test the uninstall command manually to verify its correctness.
5. Click **Save** to save the settings.
6. Verify the status in the **Auto Uninstallation Status** tab (this uninstallation will occur based on the configured Auto-Uninstall Policy).
7. Under **Auto Uninstallation Status**, select **Detailed View** to see the status and remarks.

![ ](https://www.manageengine.com/products/desktop-central/help/images/infoicon.png)

You can choose to uninstall software by configuring the auto uninstall policy. However, this will not prevent users from installing software or applications. Once installed, the software will be uninstalled automatically.

## Excluding Computers from Software Uninstallation

In certain cases, you may need to allow the usage of prohibited software for specific users. For example, many organizations prohibit chat-based applications. However, top-level executives may require such applications to communicate with clients. Endpoint Central allows you to exempt auto-uninstallation on computers in specific custom groups.

You can create a [custom group](https://www.manageengine.com/desktop-management-msp/help/configuring_desktop_central/creating_custom_groups.html) comprising specific computers or add individual computers to the Exclude list.

Follow the steps below to exclude groups:

1. Click the **Configure Prohibited Software** link from the left pane under Actions / Settings in the **Inventory** tab. This will list all prohibited software.
2. Select the checkbox corresponding to the specified software and click the link under the Exclusions column. This opens the **Add Exclusions** dialog.
3. Select whether to exclude custom groups or computers.
4. Select the groups or computers and move them to the **Excluded** list.
5. Click **Save** to save the changes.

## Approving requests to use prohibited software

This feature is supported only for customers using Endpoint Central version 10.0.192 or above.

1. From the agent tray icon, users can view the list of prohibited software in their network and raise requests to use specific prohibited software based on their needs.
2. These requests can be handled from the Desktop Central server → Inventory → Prohibit Software → User Requests.
3. **If you have integrated Endpoint Central with ServiceDesk Plus (Version 9203 or above):**

   - Requests to use prohibited software can be resolved only from the ServiceDesk Plus console. Learn how to resolve requests in ServiceDesk Plus [here](https://help.servicedeskplus.com/requests/submit-for-approval.html).
   - To associate prohibited software requests with ServiceDesk Plus templates, navigate in Endpoint Central to Admin tab → Integration Settings → ServiceDesk Plus. Select the option "Send requests for using Prohibited Software as tickets to ServiceDesk Plus for approval" and provide the ServiceDesk Plus template name.

4. Once the technician approves the request, users will be allowed to install and use the requested software.

## Configuring Global Exclusion

Similar to excluding computers and custom groups for individual software, you can create a global exclusion list of computers. Computers added to the Global Exclusion list, either manually or via custom groups, apply to all software marked as prohibited. This means these computers can have any prohibited software installed.

To configure global exclusion, click the **Configure Global Exclusion** button, select the required computers or custom groups, and save the settings.