I would like to create a system policy that would prohibit users from installing personal applications on their workstations. How would I do that?