---
title: Block Policy Group
slug: kronpam-agent-reference-guide-3-8-1/block-policy-group
description: Learn how to configure the Windows agent's pop-up message settings for blocked applications based on policies. Discover how to customize visibility for both standard and admin users. Explore the just-in-time access feature that enables users to request el
docTags: 
createdAt: 2023-06-20T14:51:36.000Z
---

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/jzkNhZxH_64NPobNrzUsT_image.png" size="78" width="550" height="414" position="center" caption="End User UI Config" darkWidth="550" darkHeight="414" showCaption="true"}

Windows agent displays a pop-up message when an application gets blocked due to policies. In this step, the user is asked to configure whether this pop-up will be visible to standard and admin users. If the dialog box is selected, no message will be displayed to the end users when an application gets blocked.

::Image[]{src="https://api.archbee.com/api/optimize/g9cApVza9NIhSh0pjZYtA/xjrw41zhosLULTKtr_Gtb_image.png" size="76" width="550" height="452" position="center" caption="One Time Access Config" darkWidth="550" darkHeight="452" showCaption="true"}

In the last step, the user is expected to configure a just-in-time access configuration. When an agent blocks an application, users can ask for an elevation to access a blocked application. Users can configure the required security steps to grant access to the user. This can be configured separately for admins and standard users. To get access, depending on the configuration, users can be asked for MFA and Managerial approval via email.