Scoping Blocker rules per user on the same machine — so technicians can run tools like PowerShell or WScript while standard users on the same device stay blocked.