Block all applications and only run a specific one

Hi Ruben,

Thanks for reaching out to the Sophos Community Forum. 

If you wish to restrict applications on your devices, you will need to first create an app group that includes all of the applications you wish to restrict. You can then go into one of your Android Enterprise Policies to add "App Control" to the policy. This will allow you to specify the app group you created. 

Another option would be to use "Kiosk Mode" on the desired device. You can find basic steps on how to set this up in the following article. With Kiosk Mode you will instead define an app group with apps that you wish to allow instead of block. Where the KBA states "Device Policy" you will select "Android Enterprise device policy".
- Sophos Mobile: Use the Kiosk mode on Android devices

Thank you Kushal, thats what I was looking for.

Explore down to User Configuration > Administrative Templates > System in the left pane. Now double click Run only specified Windows Applications. From the checkbox, select Enabled. To set the allowed applications, click Show from under Options.