All client computers in your network run Windows 7 Enterprise.    You need to prevent all standard user accounts from running programs that are signed by a specific publisher.   What should you do？（）

• A、Use software restriction policies. Create a path rule.
• B、Use software restriction policies. Create a hash rule.
• C、Use AppLocker application control policies. Create an Executable rule.
• D、Use AppLocker application control policies. Create a Windows Installer rule.