CIS D+ protefected folders question

What's the difference between adding

C:\Users*
and
C:\Users*|

to the protected files and folders?

Thanks

 

"c:\users*" under protected folders means files in it can not be modified by unrecognized files (which is automatically run sandboxed by default).

"c:\user*|" under protected folders means files in it can not be modified by unrecognized files (which is automatically run sandboxed by default) and unrecognized files can not create new files (empty folders not included) to the directory.

 

Alright thanks !
I added:

C:\Users*|
C:\ProgrammData*|
D:\Downloads*|

anything else that I should add?