...
Allow Manual Security Rated Whitelist Execution - This policy allows applications in the All Whitelist Security Rated Applications filter to run.
Allow Microsoft Installer Policy - This policy allows any child process of Windows Installer to execute. This prevents Windows Installer child processes falling under any Unclassified Applications policies.
Deny Manual Security Rated Blacklist Execution - This policy prevents execution of any file in the All Blacklist Security Rated Applications filter.