If I have 10,000 machines, I can set up a policy, one time,...

If I have 10,000 machines, I can set up a policy, one time, to block a given application. And that would propagate across all of my 10,000 machines.