Application Classification actions restrict applications from modifying certain items and will enforce standard Windows ACLs when the targeted application accesses restricted files, folders, registry keys, or services on a computer. (For details about how to create an Application Classification action, go to Protect against Internet Applications.)