A.Create Executable Rules by selecting the Create Default Rules option.
B.Create Windows Installer Rules by selecting the Create Default Rules option.
C.Create the following Windows Installer Rule.Deny C Everyone - %OSDRIVE%\Users\\Downloads\*
D.Create the following Executable Rule.Deny - Everyone - %OSDRIVE%\Users\\Documents\*