Restrict Access to MS Active Directory Services

[s_milidrag]

Hello,

I would like to know what Service object do you prefer to use to restrict access to Active Directory services.

In Application Control Blade there is a Application signature "Active Directory"

policy rule:

Or  do you prefer to place in Service & Application column all needed services:

Which one is the more secure ?

Thanks