> prevent users from install unapproved software While they could prevent it, that's not how. The software is never "installed". It's only unzipped to scoops i

> prevent users from install unapproved software While they could prevent it, that's not how. The software is never "installed". It's only unzipped to scoops install directory (usually home/scoop/...) Then it adds the install directory to the PATH and it's done. The copied executables have never been marked as unknown by windows in my experience. Admins could of course lock down systems to only allow executables with specific hashedls which are manually whitelisted by the admins, but just disallowing installs won't help at all Disallowing powershell or scripting altogether makes it impossible to use as well.