You have a single Active Directory directory service domain. All domain controllers run Windows Server 2003. You are configuring a software restriction policy. You need to allow users to run only a defined set of executables. What should you do?

A.
Set the default security level to Unrestricted. Define additional rules.

B.
Set the default security level to Disallowed. Define additional rules.

C.
Set the default security level to Unrestricted. Define designated file types.

D.
Set the default security level to Disallowed. Define enforcement options.