Is there a configuration where user is unable to run application (EXE or MSI) that is not listed in inventory (which I refer as whitelist)? Our whitelist is way smaller than our blacklist. Trying to go through our black list currently on inventory would take up more time than just adding a whitelist of software approved that people can have going forward and if its not on that list than they can not install it.