Hello,
How Application and Device Control works
Application Control is an advanced security feature included in Symantec Endpoint Protection 11.0. Application Control provides administrators with the ability to monitor and/or control the behavior of applications.
Documentation on how to take full advantage of Application Control Policies is available here:
http://www.symantec.com/avcenter/security/ADC/Configuring_Application_Control_1.1.pdf
Configuring Application and Device Control http://www.symantec.com/docs/TECH102525
Creating an Application and Device Control Policy http://www.symantec.com/docs/HOWTO18254
Using Application and Device Control to stop registry entries added by a threat or risk
http://www.symantec.com/docs/TECH95124
How to use Application and Device Control to limit the spread of a threat
http://www.symantec.com/docs/TECH93451
How to use Symantec Endpoint Protection to block or log legitimate but unauthorized software usage
http://www.symantec.com/docs/TECH97618
Merging Application and Device Control Policies http://www.symantec.com/docs/TECH132346
Hardening Symantec Endpoint Protection (SEP) with an Application and Device Control Policy to increase security
http://www.symantec.com/docs/TECH132337
Hope that helps!!