To enable system lockdown and block unapproved applications
On the console, click Clients.
Under Clients, locate the group for which you want to set up system lockdown.
On the Policies tab, click System Lockdown.
Make sure that you have included all the applications that your client computers run in the approved applications list.
You must include all the applications that your client computers run in the approved applications list. If you do not, you could make some client computers unable to restart or prevent users from running important applications.
Click Step 2: Enable System Lockdown. This step blocks any unapproved applications that clients try to run.
To display a message on the client computer when the client blocks an application, check Notify the user if an application is blocked.
To write a custom message, click Notification, type the message, and click OK.