If a user installs some apps or makes changes that make their computer unusable, what options are available for an admin to assist? For example, can the VM be restored to a certain date? Can the admin access the VM directly via Bastion or another method to run commands?
