Windows Defender Application Control: The enterprise alternative to S-Mode

Microsoft’s Windows management tools can lock PCs down to only use trusted software.