] Trust-no-exe is a executable file filter. It attaches to
] the operating system and filters all executable files, be
] it .exe .com .dll .drv .sys .dpl etc from all drives and
] all network shares against a list of files or paths, you,
] the administrator provide as trusted applications. If a
] prohibited executable (one not in the allow list or one
] explicitly defined in the deny list) is loaded, a popup
] box informs the user with an intelligent message that can
] be customised to your site.

Interesting option for SysAdmins to prevent users from executing programs in Windows, even programs on non-NTFS partitions.

Trust-No-Exe