Windows gives the ability to restrict the applications that can be run by users on a workstation.
Open your registry and find the key:[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Create a new DWORD value and name it ‘RestrictRun’ set the value to equal ‘1’ for enabled or ‘0’ for disabled.
Then define the applications the are allowed to be run at:[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
Creating a new string value for each application, named as consecutive numbers.
Reboot the computer for the changes to take affect.Key: [HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: RestrictRun