(d) selecting, by a process executing on behalf of a user and in the context of the application isolation scope and the user isolation scope, a file including a file type to invoke the application program, and invoking the chooser tool in response to selecting the file; and