How to provide process isolation and not destroy Windows