if you are using domain policies, there is a setting under user configuration, administrative templates that will allow you to pick what application a user can run.

There are two options:
Allow user to only run specified programs and do not allow users to run a spcified list of programs.

I am not sitting at my PDC at the moment, so sorry if the nomenclature is a little off.