I know! And I do (it prevents popping up a user with a gazillion prompts to accept when they enrol) But this is just kernel extension stuff. We know users use

I know! And I do (it prevents popping up a user with a gazillion prompts to accept when they enrol) But this is just kernel extension stuff. We know users use some software (not with kernel or system extensions) that's not allowed in our environment. Zoom for example (people are allowed to use it in the browser only for contact with external parties but many people install the full thing anyway). Our security department has banned the full client because of the backdoor it introduced. Right now we mark it as malware in our antivirus, but it would be great to be able to prevent it altogether.