To the GGP’s point, not a single machine at $dayjob (financial services) has chocolatey on the whitelist of software allowed. We couldn’t even use GoToMeeting

To the GGP’s point, not a single machine at $dayjob (financial services) has chocolatey on the whitelist of software allowed. We couldn’t even use GoToMeeting in our industry for ages because it required an executable download that was mostly not on the whitelist of our 2000+ customer banks & credit unions. Windows has this thing called Software Restriction Policies, think of it as an Apple App Store curated by windows sysadmins. You can whitelist by code signer, SHA256, or even file path and name (which is insecure). https://docs.microsoft.com/en-us/windows-server/identity/software-restriction-policies/software-restriction-policies https://docs.microsoft.com/en-us/windows-server/identity/sof...