Application allowlisting is the single most effective security control an organization can enforce on open devices. Windows comes with an application allowlisting feature that is included in every commercial Windows version. 1 and 1, sometimes, just equals 2, and that is ok.