Chhosingthe executablefiles that can be

I own a cyber cafe and I have noticed that my clients downloads and instal all kinds of programs; please I need help to specify with admin rights the programs only that i need to be executed or otherwise.

Note my clients have restricted profiles;but yet the still can install and run applications that are virus inclined.