You need to ensure that when users join computers to the domain, the computer accounts are automatically created in an organizational unit (OU) named All_Computers
You need to ensure that when users attempt to execute App1, the certificate for App1 is verified against a certificate revocation list (CRL)