Then give it a name and edit.
Now go to Computer Configuration.
Now go to Windows Settings.
Then go to Security Settings.
Pick the Software Restriction Policies.
Now we add all the programs *.exe files and stop them from executing for everyone or for specified Groups (you will have to create those in the AD).