Your organization wants to allow only trusted applications to run on corporate Windows 11 devices managed by Intune. Security requires that apps deployed through Intune (via the Intune Management Extension) are automatically trusted and allowed to run, while other unapproved executables are blocked. You plan to create an App Control for Business policy. Which configuration lets Intune-deployed apps run without individually authoring rules for each one?