Thats almost what i need but one more point, how about if i want to use an USB and copy whatever inside my machine or some where else, would i be able to do so.
For example, i have word files in USB, so i want to open the USB and copy the file but not run it, would that be possible or the policy will block all apps and allow only whatever i mention.
Thanks