Is application control deployed on workstations to prevent execution of unapproved executables?