Do you need an antivirus if you disable the launch of the left software in the group policy?

Question

System administration

Suppose there is a public computer where everyone can stick flash drives and download any files from the Internet.
Question. What happens if you disable the execution of all left (optionally - not signed) executable files, scripts and scripts in group policy?
Is it possible to catch the virus in this case?

Answer 1

Maybe. Some viruses use OS vulnerabilities to elevate their privileges. And you will not be able to forbid executing files for system.