How to prevent portable applications from running?

Question

Domain name market

Hello.
The company has nimble users who really do not want to put up with a limited set of software.
They began to use portable programs, which makes life very difficult.
All systems have Win7Pro, server 12R2.
The question is how to prevent everyone from running portable applications?
Ahead of the answers:
1) Prohibit the launch of certain programs - did not work, learned how to rename.

Answer 1

Policies set a ban on the launch of all, except those allowed.
Those. allow launching from standard folders where only administrators can write.

Answer 2

https://technet.microsoft.com/en-us/library/hh8315...
In short: you allow programs to run from Windows and Program Files, Program Files (x86) and forbid them from anywhere else.

Answer 3

Be sure to prohibit launching from the user profile and any Removable media. (path rule)

Answer 4

Purely technical measures are indispensable here.
SMP. And then a couple of screenshots and a call to the carpet of especially nimble ones with deprivation of the bonus. At first, you can start a rumor that the NSR will be introduced soon - in fact, even a rumor about this already makes people think - just like a dummy video camera - because no one usually tries to figure out whether it's a dummy or not :)

Answer 5

Some programs are installed in the profile ...
In general, if the standard measures are not suitable, install the simplest DLP system - staffcounter.net/en
(Paid), there is such a blocking + monitoring of user actions, it may come in handy.