you can do it with regedit or group policy editor...
what's actually your setup & requirement..
just to do it in stand alone single windows xp workstation or many win xp workstations or in windows server client setup with windows xp clients...
I have a workgroup of windows xp and windows 7 systems(no domain controller). Some of these users are .net developers and they need admin rights to run their apps on IIS on their local system. With admin rights, they sometimes install their own softwares and bypass IT team. I need to stop such instances by controlling their admin rights by not allowing them to install any software. for installing any software, we should have a separate admin rights with full access.
Remember this will block every one including you and your it team regardless of admin or standard users. if you want to install any software after this you have follow same steps to revert it , then install all software's you need .after completed your work you have to block it .. it time consuming but its only choice for work group pcs without money, i'm not ware of any corporate toold bcz i'm just service engineer not ant corporate IT guy.
""""""""""" do this after office work hours or in their absence, or else they can revert as they also have admin rights"""""""" kind of funny,but you have to if you need to block them
using regedit http://www.pctools.com/guides/registry/detail/1148/
using group policy gpedit.msc http://www.ehow.com/how_6369411_disable-installation-ap...
yeah its nice when you use it on server , also win 7 enterprise & win 7 ultimate has it but never tested..
what version you got windows 7 pro or enterprise
""""Windows 7 Professional can be used to create AppLocker rules. However, AppLocker rules cannot be enforced on computers running Windows 7 Professional"""
you need server OS if you need control or else its messy job
got some article while searching,
give a try if you are intrested http://www.networksteve.com/windows/topic.php/Is_there_...