AppLocker will block applications from running based on the descriptor. You can block programs by publisher, path, version, file name, publisher description or even hash. This feature is only available in Windows 7 and Microsoft Windows Server 2008 R2. While it can be used on an active directory domain, I use local group policy. You can also create exceptions to allow some programs through the rules.

AppLocker is a feature introduced that plays of the old hash rules to block programs.