Your network contains an Active Directory domain named contoso.com.
You create a software restriction policy to allow an application named App1 by using a certificate rule.
You need to prevent the software restriction policy from applying to users that are members of the local
Administrators group.
What should you do?

A.
Modify the rule for App1

B.
Modify the Enforcement Properties

C.
Modify the Security Levels.

D.
Modify the Trusted Publishers Properties