This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(73.60000000000001, 31%, 17%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EMA%3C/text%3E%3C/svg%3E)
I’ve already blocked WhatsApp Web access and hidden the Microsoft Store UI using Intune policies. However, some users had already downloaded and installed the WhatsApp Desktop application before these restrictions were applied, and they are still able to use it. I want to ensure that execution of the WhatsApp Desktop app is completely blocked on all endpoints, even if it is already installed.
Additionally, I want to remove admin rights from all endpoint users and create a single local admin account on each machine. The goal is to ensure that users log in using standard accounts only, and only one predefined local admin account remains on each machine for IT purposes.
Can anyone guide how to:
Block execution of WhatsApp Desktop (installed previously) via Intune or Defender policies?
Remove admin rights from existing users and enforce a standard user role, while ensuring only a custom local admin account remains?
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(300.8, 28.000000000000004%, 39%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ECK%3C/text%3E%3C/svg%3E)
To WhatsApp Desktop
You have two main options: either uninstall WhatsApp or block its execution.
WhatsApp.exe from running. https://techcommunity.microsoft.com/blog/intunecustomersuccess/blocking-and-removing-apps-on-intune-managed-devices-windows-iosipados-android-a/4383156Remove ___domain Admin Rights from Endpoints
There are a number of similar questions and guides
If you find the answer above helpful, please Accept the answer to help anyone in the community who might have a similar question to quickly find the solution.