You want to find out who has been running a specific game on the client computers in your company. You do not want to prevent users from running the program, but instead want to log information when the file runs. The application is not digitally signed.

How should you configure a rule in AppLocker to meet these requirements?

answer

Create an executable rule with a publisher condition. Set the enforcement mode to Enforce rules.

Create an executable rule with a path condition that identifies the file. Set the enforcement mode to Audit only.

Create an executable rule with a path condition that identifies the file. Set the enforcement mode to Enforce rules.

Create an executable rule with a publisher condition. Set the enforcement mode to Audit only.