Command exclusion with SEPM12

Hi all,

I need run a specific command with exclusion policy.
This is the scenario:

In the SEPM I have an application control policy, blocking the sc.exe file of Windows.

But I need run the command: "sc.exe stop service", having the same secure policy only adding the exclusion. Only giving permission to run this command and not another instruction from de sc.exe file, because I don't want to unblock this file.

Is possible configure this on SEM12?

Thank you all.