Use Group Policy to block execution of .exe files from USB drives or non-system paths. Alternatively, pre-approve a specific hash of the Blender portable ZIP and distribute it internally.
Since the .exe isn't "installed" in the traditional sense, SmartScreen might flag it. Click and then "Run anyway" . This is safe if you downloaded directly from blender.org. blender portable zip
The is the latter. It is a self-contained version of the software. It does not require a formal installation process to function. It is the "plug-and-play" version of the 3D suite. Use Group Policy to block execution of