All client computers on your company network run Windows 7 and are members of an Active Directory Domain Services domain.
AppLocker is configured to allow only approved applications to run.
Employees with standard user account permissions are able to run applications that install into the user profile folder.
You need to prevent standard users from running unauthorized applications.
What should you do?