Your network contains a Remote Desktop Session Host (RD Session Host) server named Server1. You
need to prevent users from running a application named App1 in Remote Desktop sessions. The
solution must ensure that the users can run other applications from Remote Desktop sessions on
Server1. What should you do? (Each correct answer presents part of the solution. Choose three.)

A.
Start the Application Management service, and then set up the startup to Automatic.

B.
From th Local Group Policy console, set the security level of the software restriction policy to Basic
user.

C.
From the Local group Policy Editor, create the default AppLocker executable rules and a deny
AppLocker executable rule.

D.
Start the Application Identity service, and then set the startup type to Automatic.

E.
From the Local group Policy Editor, modify the AppLocker Enforcement settings.

Explanation:
Why are my AppLocker rules not being enforced? The most common reasons why the AppLocker
rules might not be enforced are: The Application Identity service (AppIDsvc) is not running. Rule
enforcement is set to Audit only. http://technet.microsoft.com/enus/library/ee619725(v=ws.10).aspx