We are introducing additional controls on University‑managed Windows 11 devices to block the installation and execution of certain high‑risk software using BeyondTrust Endpoint Privilege Manager (EPM).

This change improves endpoint security by preventing privilege escalation for software that presents elevated risk, including applications that may conflict with managed security controls or pose data and compliance concerns.

The benefit of this approach is stronger protection and consistency across devices, ensuring that approved security measures (such as antivirus and endpoint protection) cannot be undermined by unmanaged software.

A small number of users may see requests automatically denied when attempting to install restricted software, along with a clear message explaining why. No downtime is expected, and normal device use will continue as usual.