Maybe wdac/app control for business is a step to far? I know that msft
doesn't recommend using applocker... as no one investments will be made
to improve applocker... but if you want to deploy a basic app control
policy, you can take a look at my old...
