How do I block programs that are not installed on my Computer?

As the title says I want to know how to block programs that are not installed in my units e.g. IDM, I run a computer shop business and my customers have been complaining lately that there's been a lot of people using IDM to download stuffs. I did disable program installations on my units but the problem is their IDM are already installed on their USB so I want to know if there's anything I can do or install to stop them from using it.


I'm new here so I'm not sure if my thread is on the right location I apologize if it's not.

Just taking a guess but is this the site/program your IDM refers to?
Internet Download Manager: the fastest download accelerator

You can use Software Restriction Policies which allow you to do just that. Be careful with what you deny though, it can brick your system when not used wisely.

While you can specifically block only IDM, if they are a bit smart they can bypass SRP by renaming the executable. So it is probably better to use a more restrictive policy and deny-all then allow a select few (mainly executables installed in the windows and programs directory). This will effectively block anything you haven't installed yourself as administrator. It is also a very effective way to block viruses and the like. The guide in my second link describes how to implement such a policy.

More info : Using Software Restriction Policies to Protect Against Unauthorized Software
And an excellent tutorial on how to setup SRP : How to make a disallowed-by-default Software Restriction Policy

@Berton

Yes, that annoying program.

@oneeyed

Thank you! I'll try that and see how it goes. I'm not good with this stuffs but I'll try anyways.