i just did this, there is a group policy for this. you
have to go to user config>admintemplates>system> dont run
specified applications, enable the list of specified
applications then type in the .exe of the games, ex.
mshearts.exe,freecell.exe,pinball.exe,sol.exe,shvlzm.exe
etc. I know this works i just did this last week