All client computers on your company network run Windows 7 and are members of a Windows Server 2008 R2 domain. The R&D department staff are local administrators on their computers and are members of the R&D global security group. A new version of a business software application is available on the network. You plan to apply an AppLocker security policy to the R&D group. You need to ensure that members of the R&D group are not allowed to upgrade the software. What should you do?（）

• A、Create an Audit only restriction based on the version of the software.
• B、Create an Audit only restriction based on the publisher of the software.
• C、Create an Enforce rule restriction based on the version of the software.
• D、Create an Enforce rule restriction based on the publisher of the software.