Where are the white and black lists in WinServ16?

Question

System administration

Given: there is a domain on WinServ2016, 15 PCs on Win10 connected to it.
Background: We decided to install mailbird instead of the main mail client, since everyone got used to it, and the licenses were already purchased. After a problem was discovered, on computers with normal user rights, the mail client asks for admin access at startup, which will not be very convenient if I have to run around and enter it all in the morning.
Actually the question is: Where can I add programs to either the black or white list? I looked in the gpo, but I didn’t find anything except for the prohibition of the launch