You are a system administrator for a department that has Windows 10 Enterprise computers in a domain configuration.

You deploy an application to all computers in the domain.

You

need to use group policy to restrict certain groups from running the application.

What should you do?

A. Set up DirectAccess.

B. Configure AppLocker.

C. Disable BitLocker.

D. Run the User State Management Tool.

Explanation:

AppLocker is a feat

ure in Windows Server 2012, Windows Server 2008 R2, Windows 8, and Windows 7 that advances the functionality of the Software Restriction Policies feature. AppLocker contains new capabilities and extensions that reduce administrative overhead and help admin

istrators control how users can access and use files, such as executable files, scripts, Windows Installer files, and DLLs.

AppLocker rules can be applied to security groups. We can use a group policy to apply AppLocker rules to the security groups to prev

ent them from running the application.

References:

https://technet.microsoft.com/en-us/library/ee619725(v=ws.10).aspx#BKMK_WhatRruleConditions