While this will prevent some apps from running and/or from being
installed, it won't prevent all, especially those invoked from/through a
browser.

This setting only prevents users from running or installing programs
that are started by the Windows Explorer process. It does not prevent
users from ru...

[ more ]