What should you do?

You are a system administrator for a department that has Windows 10 Enterprise computers in a domain configuration.

You deploy an application to all computers in the domain.

You need to use group policy to restrict certain groups from running the application.

What should you do?
A . Set up DirectAccess.
B . Configure AppLocker.
C . Disable BitLocker.
D . Run the User State Management Tool.

View Answer

Answer: B

Explanation:

AppLocker is a feature in Windows Server 2012, Windows Server 2008 R2, Windows 8, and Windows 7 that advances the functionality of the Software Restriction Policies feature. AppLocker contains new capabilities and extensions that reduce administrative overhead and help administrators control how users can access and use files, such as executable files, scripts, Windows Installer files, and DLLs.

AppLocker rules can be applied to security groups. We can use a group policy to apply AppLocker rules to the security groups to prevent them from running the application.