Which feature allows Windows 10 Enterprise to control which applications can run?

The feature that allows Windows 10 Enterprise to control which applications can run is AppLocker. AppLocker is a security feature that enables administrators to define rules that specify which applications are allowed to run on a system. This is particularly useful in enterprise environments where managing software access is essential for maintaining security and compliance. By creating rules based on application paths, publishers, or file hashes, administrators can ensure that only trusted applications are executed, which helps to prevent unauthorized software from running and reduces the risk of malware infections.

In this context, BranchCache is designed to optimize data access across WAN links by caching content locally, Remote Desktop is focused on providing remote access to systems, and BitLocker is used for full disk encryption to protect data on drives. Each of these features serves a different purpose that does not relate directly to application control, which is why AppLocker is the appropriate choice in this scenario.