https://www.petervanderwoude.nl/post/preventing-user-targeted-applications-and-policies-on-specific-systems-with-configmgr-2012/