All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain

[answerhappygod]

All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain.
AppLocker is configured to allow only approved applications to run.
Employees with standard user account permissions are able to run applications that install into the user profile folder.
You need to prevent standard users from running unauthorized applications.
What should you do?

A. Create Executable Rules by selecting the Create Default Rules option.
B. Create Windows Installer Rules by selecting the Create Default Rules option.
C. Create the following Windows Installer Rule: Deny Everyone - %OSDRIVE%\Users\<user name>\Downloads\*
D. Create the following Executable Rule: Deny - Everyone - %OSDRIVE%\Users\<user name>\Documents\*