I only want applications put out through Zenworks to be able to be ran on
the workstation. Can Zenwokrs control what this? For instance if
somebody tried to run an application locally from a USB pen or installed
an application it would not run because Zenworks would not let it?

Thanks for nay help/tips.