What are some characteristics of systems in which you would expect application whitelisting to work well? What about systems in which you would expect it to not work well?

What will be an ideal response?

Application
whitelisting
works
particularly
well
on
systems
that
do
not
often
have
their
software
changed.
These
systems
are
typically
dedicated
to
very
specific
functions:
ATM
machines,
database
servers,
LDAP
servers,
and
so
on.
Application
whitelisting
is
hardest
on
user
workstations,
as
users
often
want
or
need
to
install
new
software,
and
workstations
generally
have
a
wide
variety
of
software
requiring
periodic
patches.