Hello,
I have some questions about this. How do you exactly view what is on a writable volume (UIA only). If I view it via C:\snapvolumestemp it looks like the whole file system is on the user writable volume.
Also with this config, won't excluding program files not capture applications that users installed themselves?