...
Allow Manual Security Rated Whitelist Execution - This policy allows whitelisted applications to run unmanaged by Application Control and prevents graylist Application Control Policies from applying to whitelisted applicationsapplications in the All Whitelist Security Rated Applications filter to run.
Allow Microsoft Installer Policy - This policy allows any child process of Windows Installer to execute. This prevents Windows Installer child processes falling under any Unclassified Applications policies.
Catch-all Blacklist
Deny Manual Security Rated Blacklist Execution - This policy prevents execution of any files marked with a manual security rating of 'blacklist.'
New Software Delivery Package Whitelist Policy
Orangelist New Applications
Package Whitelist
Reference System Whitelist
Trusted File Owner Policy
Whitelist Microsoft Applicationsfile in the All Blacklist Security Rated Applications filter.