I have enabled certain policies to stop users installing applications
such as -

Disable Windows installer

Dont run specified Windows applications

This seems to work fine except with the odd apps, such as WinZip etc.

What are your thoughts as to the best way around this situation? I will
be looking at RPM but in the future, I was just wondering if there is
other ways around this situation with the policies?