How to remove games from user access

I am being asked to not allow users in one department to have access to games (XP workstations in an AD network environment). What is the easiest way to do that?