How to restrict the launch of unsigned programs?

Question

System administration

Guys, such a question: there are two sets of files - signed / unsigned. Raised the Win12serv r2 virtual machine. I was looking for information that you can somehow do something through SRP, nothing happened. Help. The bottom line is to limit the input of unsigned programs, then check the same data set, but already signed, so that they run. Break the signature on the data set and see how the OS reacts. Urgently!