Whitelist mode

In whitelist mode, all applications are allowed that match a whitelist rule. Using blacklist rules, you can block individual applications in this case as an exception to an existing whitelist rule or template.

Priority: blacklist rule - whitelist rule - other settings

To allow all users to run all programs in the Program Files folder, create a directory rule and allow all applications within this folder to run. To prevent one of these applications from running on one computer, create a blacklist rule for only this application and apply it to the computer.