Endpoint Protection

Just to correct the actual version = Version 11

You can create an application and device control to block the program from running.

You can use the path or even MD5 hash of the .exe to do this. 

I read somewhere that the Application doesn't works on x64 clients, is it correct?

I think that both path or MD5 can't stop then, because the path can be anywhere on the this, the exe name the same.

And MD5 hash, we don't have the exe file to extract it.

All these procedures are to disable users from running Portable Applications coming from internet, pendrivers or some where sources, which is not allowed inside the company.

Our Windows policy already controls and deny user software instalations. But Portable Apps (like Thinapp from VmWare) virtualize software and don't need to install.

 You are correct application and device control is not supported on 64 bit servers/Clients.

You can block the application by both File Fingerprint or file name with location.

Is application and device control still not available on x64 clients under RU5? 

We only have a few machines running x64 vista right now, but with windows 7 hitting general release soon, we will likely be installing the x64 version on most of our hardware.  We still need to be able to enforce the restrictions on usb drives etc once we upgrade.