Applying a security policy to an instance of an application

A non-transitory machine-readable medium storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:

• storing, within a single user account at a computing machine, multiple supervised computing resources and multiple additional computing resources, wherein the multiple supervised computing resources are associated with a security policy;
• executing a first instance of a specified application that lacks read access and lacks write access to any and all of the multiple supervised computing resources;
• executing, simultaneously with the first instance, a second instance of the specified application that accesses at least a portion of the multiple supervised computing resources;
• applying rules from the security policy to the second instance of the specified application while foregoing applying the rules from the security policy to the first instance of the specified application;
• and
• causing display, by a display unit displaying a graphical user interface of the computing machine, of a visual indicator that the second instance of the specified application is associated with the security policy, wherein the visual indicator comprises a border for a portion of the display unit associated with the second instance, wherein the border comprises pixels that are external to the portion of the display unit associated with the second instance and within a threshold distance from an edge of the portion, wherein multiple computing resources are displayed on the display unit, wherein each displayed computing resource is associated with a display priority value based on a time when the displayed computing resource was last selected, wherein the border comprises pixels that are not occupied by a computing resource that was selected after a last selection time of the second instance, wherein the security policy causes tracking, by a tracking service, of use of the second instance of the specified application, while forgoing causing tracking, by the tracking service, of use of the first instance of the specified application.

A system comprising:

• processing circuitry;
• and
• a memory storing instructions that, when executed by processing circuitry, cause the processing circuitry to perform operations comprising:
• storing, within a single user account at a computing machine, multiple supervised computing resources and multiple additional computing resources, wherein the multiple supervised computing resources are associated with a security policy;
• executing a first instance of a specified application that lacks read access and lacks write access to any and all of the multiple supervised computing resources;
• executing, simultaneously with the first instance, a second instance of the specified application that accesses at least a portion of the multiple supervised computing resources;
• applying rules from the security policy to the second instance of the specified application while foregoing applying the rules from the security policy to the first instance of the specified application;
• and
• causing display, by a display unit displaying a graphical user interface of the computing machine, of a visual indicator that the second instance of the specified application is associated with the security policy, wherein the visual indicator comprises a border for a portion of the display unit associated with the second instance, wherein the border comprises pixels that are external to the portion of the display unit associated with the second instance and within a threshold distance from an edge of the portion, wherein multiple computing resources are displayed on the display unit, wherein each displayed computing resource is associated with a display priority value based on a time when the displayed computing resource was last selected, wherein the border comprises pixels that are not occupied by a computing resource that was selected after a last selection time of the second instance, wherein the security policy causes tracking, by a tracking service, of use of the second instance of the specified application, while forgoing causing tracking, by the tracking service, of use of the first instance of the specified application.