Creating a Windows application filter to prevent running executables

In this example, we create a Windows application filter profile that prevents users from running Powershell, MS Paint, and other executables except in the %PROGRAMFILES%\*, %WINDIR%\* directories.

We then apply this Windows application filter to a non-privileged secret.

To create the Windows application filter:

1. Setting up WinRM on the remote server
2. Creating a target with server information as Windows
3. Creating a Windows application filter profile
4. Creating a privileged account secret
5. Creating a non-privileged account
6. Launching the secret