I have a requirement to disallow EXECUTING exe file which means whenever user try to install any exe file, it'll be denied.
But User should be able to access other applications like microsoft office and any other applications installed in their system.
And I would like to disallow downloading exe from internet also.
I want to do above 2 things for his PC only without doing anything in firewall
Could you advise how can it be done?