What should you create?

Your network contains an Active Directory domain named contoso.com.
You need to prevent users from installing a WindowsStore app named App1.
What should you create?

A.
AnApplication control policy executable rule

B.
AnApplication control policy packaged app rule

C.
A software restriction policy certificate rule

D.
AnApplication control policy Windows Installer rule

Explanation:
Windows 8 is coming REALLY SOON and of course one of the big new things to computer with that is the
newPackaged Apps that run in the start screen. However these apps are very different and do not install
liketraditional apps to a path or have a true “executable” file to launch the program. Ofcourse enterprises need
a way to control these packaged apps and therefore Microsoft has added a newfeature Packaged Apps option
to the App1ocker feature.
A: For .exe or .com
B: A publisher rule for a Packaged app is based on publisher, name and version C: You can create a certificate
rule that identifies software and then allows or does not allow the software torun, depending on the security
level.
D: For .msi or .msp
Packaged apps (also known as Windows 8 apps) are new to Windows Server 2012 and Windows 8.
They are based on the new app model that ensures that all the files within an app package share the
sameidentity.
Therefore, it is possible to control the entire Application using a single App1ocker rule as opposed to the
nonpackagedapps where each file within the app could have a unique identity.
Windows does not support unsigned packaged apps which implies all packaged apps must be signed.
App1ocker supports only publisher rules for Packaged apps. A publisher rule for a Packaged app is based on
the following information:
Publisher of the package
Package name
Package version
Therefore, an App1ocker rule for a Packaged app controls both the installation as well as the running of theapp.
Otherwise, the publisher rules for Packaged apps are no different than the rest of the rule collections;
theysupport exceptions, can be increased or decreased in scope, and can be assigned to users and groups.
http://technet.microsoft.com/en-us/library/dd759068.aspx http://technet.microsoft.com/en-us/library/hh994588.
aspx
http://www.grouppolicy.biz/2012/08/how-manage-published-a-k-a-metro-apps-in-windows- 8-using-grouppolicy/
http://technet.microsoft.com/en-us/library/hh994597.aspx#BKMK_Cert_Rules Packaged Apps run in the start
screen.
However these apps are very different and do not install like traditional apps to a path or have a
true”executable” file to launch the program. Enterprises need a way to control these packaged apps and
therefore Microsoft has added a new featurePackagedApps option to the App1ocker feature.