Not easy, if possible at all. Why don't you let your users work as users
and take them their administrator rights? This would prevent them from
installing any applications and - beyond that - has some security
improvements.
This is often a good option. Just remember to test this thoroughly as
it can have bad effects on the user environment if there are
applications that need registry access or other non-user permissions.