Blacklist mode
When using the blacklist mode, all applications are allowed to run unless they are listed in blacklist rules or templates. Use blacklist rules or templates in this mode to specify the applications that users are not allowed to start. Use whitelist rules in this mode to define exceptions to blacklist templates or rules.
Priority: whitelist rule - blacklist rule - other settings
Example: Users in your organization are not allowed to run the program “Skype”. However, your CEO must use Skype when being out of the office. To allow this, create a blacklist rule to block Skype for all uses. Then define a whitelist rule allowing the Skype application and configure it to apply to only the CEO’s account.