You have 100 client Windows 8.1 computers. Users are NOT configured as local administrators.

You need to prevent the users from running applications that they downloaded from the Internet, unless

the applications are signed by a trusted publisher.

What should you configure in the Security settings from the Action Center?