Create a Reference System Whitelist Policy
Creating a whitelist policy for your reference system targets a collection of computers, searches for Windows executables, and then adds any Windows executables to a whitelist.
You can create a reference system whitelist policy either automatically or manually: