I'd like to block executables from running in %USERPROFILE%\Downloads or C:\Users\*\Downloads to avoid users from running executables they may have inadvertently downloaded. Is there a way to do such a thing with Application Control?

Other applications such as AppLocker can do this however I am running Windows 11 Pro and would like to centralize the configurations.