Hello,
What version of SEP are you running?
How Application and Device Control works
Application Control is an advanced security feature included in Symantec Endpoint Protection 11.0. Application Control provides administrators with the ability to monitor and/or control the behavior of applications.
Check these Articles for SEP 11.x:
Application and Device Control
www.symantec.com/docs/TECH104431
and
Check these Articles for SEP 12.1:
Symantec Endpoint Protection Manager 12.1 - Application and Device Control (ADC) - Policies explained
http://www.symantec.com/docs/TECH188597
Documentation on how to take full advantage of Application Control Policies is available here:
http://www.symantec.com/avcenter/security/ADC/Configuring_Application_Control_1.1.pdf
Configuring Application and Device Control http://www.symantec.com/docs/TECH102525
Creating an Application and Device Control Policy http://www.symantec.com/docs/HOWTO18254
Using Application and Device Control to stop registry entries added by a threat or risk
http://www.symantec.com/docs/TECH95124
How to use Application and Device Control to limit the spread of a threat
http://www.symantec.com/docs/TECH93451
How to use Symantec Endpoint Protection to block or log legitimate but unauthorized software usage
http://www.symantec.com/docs/TECH97618
Merging Application and Device Control Policies http://www.symantec.com/docs/TECH132346
Hardening Symantec Endpoint Protection (SEP) with an Application and Device Control Policy to increase security
http://www.symantec.com/docs/TECH132337
Hope that helps!!