Is there a way to stop the NAL from force running applications if a user is
a remote location?

For instances if a Chicago user is visiting the New York Office and logs in
on a machine in that office can we prevent that user from running
applications from the NAL?