Prevent installation of any programs on Windows 7

You remove admin rights from the user and only give it user access or whatever is appropriate.

Control Panel - > User Accounts

currently the machine ins not on a domain, but is part of a student lab. The user level is Standard user. I am trying to prevent users of the lab from adding software they have downloaded from the internet such as streaming music players, games, adware programs, tool bars and video players.

Steps to follow

1. Click Start Menu and type "group policy" in the Instant Search box,
and as it appears in the result press Enter to execute it.

Tips: Image + R and then type "gpedit.msc" and press Enter.

2. Now, under User Configuration, expand the Administrative Templates
and expand Windows Components scroll down and click Windows Installer.

3. On the right-side you might see a list of different options.

4. Select one and apply that.

http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-to-stop-users-from-installing-new-programs-in

here is an easy method.. but would need to be done on each machine unless you connect them to the domain and apply via GPO (group policy) which is what I would suggest if possible.

but it can be done manually with an admin account. or further down check out the parent controls which work quite well and will stop all but the best from messing with your machines

http://answers.microsoft.com/en-us/windows/forum/windows_7-security/how-to-stop-users-from-installing-new-programs-in/59cfe502-dc5c-4bd4-85fe-a7e5f89fe1e0

here is the parent controls tutorial also

http://windows.microsoft.com/en-au/windows/prevent-children-using-specific-programs#1TC=windows-7