A forum for reverse engineering, OS internals and malware analysis 

 #23229  by Vrtule
 Fri Jun 27, 2014 3:31 pm
AFAIR there are some GPO settings that allow you to specify programs that can and cannot be run by users. The program may be specified either by the full name of their executable or by its hash. Unfortunately, I do not remember any details and I am not sure whether it is possible to use this GPO on home computers in a simple manner.

I got some experience with this only in one university course focused on Windows administration.