Have a list of programmes which i need to allow, all other remaining programms should be blocked. How can i do that?

HI everyone,

I have a SEPM with 12.1.2 version and around 500 clients. I have a list of programmes or applications which should have only access  to run in work environment, all remaining applications should be blocked from installing and running. So whats the best way of doing it ?

Regards,

Anoop Jeevan.