When the Run Authorized Apps Only option is activated, the SPO rejects any client request to run an application image file not previously registered through the Visual OSA utility. This option is enforced by private ASOs and the SPO. The applications authorized for the SPO may be a subset of those authorized for the ASO because the SPO requires the application image to be registered for shared access by at least one AKA Name, whereas the ASO allows any type of registration to satisfy the requirement.