All client computers in your network run Windows 7 Enterprise. You need to prevent all standard user accounts from running programs that are signed by a specific publisher. What should you do？（）

A. Use software restriction policies. Create a path rule.
B. Use software restriction policies. Create a hash rule.
C. Use AppLocker application control policies. Create an Executable rule.
D. Use AppLocker application control policies. Create a Windows Installer rule.