You support Windows 10 Enterprise computers in a workgroup.
You have configured a local AppLocker policy to prevent users from running versions of app.exe previous tov9.4. Users are still able to run app.exe.
You need to block users from running app.exe by using the minimum administrative effort.
What should you do?

A.
Change the Application Identity service startup mode to automatic and start the service.

B.
Configure enforcement for Windows Installed rules.

C.
Configure a Software Restriction Policy publisher rule.

D.
Run the GPupdate /force command in an relevant command prompt.

Explanation:
https://technet.microsoft.com/en-us/library/ee791779(v=ws.10).aspx
https://technet.microsoft.com/en-us/itpro/windows/keep-secure/configure-the-application-identity-service