Blocking executables for mobile users

[create_share]

I have blocked executables from my internet server for my domain computers
but how can i block them for my notebook users who travel a lot and connect
their machines to internet directly?

Thanks!

 

[Anteaus]

Beyondlogic's TrustNoExe might be suitable. This can be set to prevent
executables being run from the downloads location, or from CDs. Not totally
secure but will stop casual (and accidental) installing.

Be aware that it does have a few conflicts, notably Autocad.