How to prevent .exe from running for the system?

Question

System administration

I have already tried to block programs from running through the registry and with some programs like AskAdmin. And everything seems to work, the programs do not even run as administrator. But if the system decides to run the .exe or, for example, use the PowerRun program, which opens files on behalf of the system, then no rules set to prohibit work. Is it possible to prevent the system from running .exe files?
Z.Y. I'm not going to ban vital system exe, only external and not responsible for the health of the system itself, but run on behalf of the system. For example, a ban on antivirus, etc.

Answer 1

How to prevent .exe from running for the system?

The system does not run programs, they are run by users.
And for the user, the ban is configured elementarily -
This is a normal setting practice at workplaces.
After proper configuration, the user runs only those programs that the administrator has already installed.
The user can do nothing more - neither install the program nor run the executable file.

Answer 2

Perhaps if you forbid the system to run exe, then the system will not be able to boot and will quickly fall?