Limits the Windows programs that users have permission to run on the computer

Limits the Windows programs that users have permission to run on the computer. If you enable this setting, users can only run programs that you add to the List of Allowed Applications. NOTE: This setting only prevents users from running programs that are started by the Windows Explorer process.

START > RUN > GPEDIT.MSC > USER CONFIGURATION > ADMINISTRATIVE TEMPLATES > SYSTEM > FIND RUN ONLY ALLOWED WINDOWS APPLICATIONS > RIGHT CLICK > PROPERTIES > CLICK ENABLE > FIND APP. > OK REBOOT