Feature requirements on Kaspersky Embedded System Security for Windows

[Tahmeed702]

Dear Community

We have a requirements on Kaspersky Embedded System Security for Windows

When Application Control policy is applied:

-- Group policy access should be denied
-- Power-shell disable / no one can access power-shell.
-- Registry & Control Panel access denied
-- Portable application block

*Please share the extension list which will be blocked by KESS (like, .exe, .bat etc)

When Device Control policy is applied: Block all USB drive except keyboard & mouse & SATA drive except preinstalled HDD & DVD (if any).

We want to know are these requirements can be complied by KESS and if complied how can we do that , how can we do the configuration any support articles available. 

Regards
Ahnaf Tahmeed