You have a computer that runs Windows 7.
You have an application control policy on the computer.
You discover that the policy is not enforced on the computer.
You open the Services snap-in as shown in the exhibit. (Click the Exhibit button.)
You need to enforce the application control policy on the computer.
What should you do?
A.
Set the Application Identity service Startup Type to Automatic and start the service.
B.
Set the Application Information service Startup Type to Automatic and start the service.
C.
Set the Application Management service Startup Type to Automatic and start the service.
D.
Set the Application Experience service Startup Type to Automatic and start the service.
Explanation:
Application Identity service
AppLocker relies upon the Application Identity Service being active. When you install Windows 7, the
startup type of this service is set to Manual. When testing AppLocker, you should keep the startup
type as Manual in case you configure rules incorrectly. In that event, you can just reboot the
computer and the AppLocker rules will no longer be in effect. Only when you are sure that your
policies are applied correctly should you set the startup type of the Application Identity Service to
Automatic. You should take great care in testing AppLocker rules because it is possible to lock down
a computer running Windows 7 to such an extent that the computer becomes unusable. AppLocker
policies are sometimes called application control policies