Application Classification actions are used to set the user token on processes. After the token is set, standard Windows ACLs will be enforced when the application accesses files, folders, and other system settings. An example of using this application action can be found here in steps 2-4 of Protect against Internet Applications
...