$1.$ Configure the Default Domain Policy for AppLocker as follows:

o Access the Application Control Policies for AppLocker.

o Set Configure rules enforcement for Executable rules to Enforce rules.

$2.$ Configure the Default Domain Policy for AppLocker as follows:

o Create a new Executable Rules rule.

o For Permissions, use the default Action set to Allow.

o Set User or Group to the Support group.

o For Conditions, use the default primary condition set to Publisher.

o For the Publisher, select the reference file: C:$\backslash$CallCenter$\backslash$CallStart$.$exe

o Use the slider to set the rules to Publisher.

o For all other options, accept the defaults.

o Create the default rules.

Complete the following tasks on Building A $>$ Floor $1>$ Office $1>$ Office$1$:

$3.$ Configure the following NTFS settings:

o Disable permissions inheritance for D:$\backslash$Finances$.$ Convert the existing permissions as explicit permissions.

o Add the Managers to the D:$\backslash$Finances ACL.

o Assign Full Control over the folder to the Managers group.

$4.$ Turn on Windows Firewall for the Domain and Private network profiles.

$5.$ Update the Apps allowed through the firewall for the Domain network profile to remove the Remote Assistance exception.