ZES (Zenworks Update 3a) - Application control question


I would like to know if there is a way to use ZES to block ALL exe files except the one provided in the policy ?

From what i can see in the documentation, we can't use wildcards to block all EXE then after allow some to be executed.

We need this for public workstation to run only the allowed programs.

No user exe should be runned, no renamed exe too...

Any idea how to do this ?

Thank you !