Active Directory Enable/Disable application

Is it possible to prevent an application to be launched based on the current logged in w开发者_运维百科indows user accounts using AD?

Is this a configuration only thing in AD or the application itself has be coded somehow to prevent from being launched.

---

Create a Group Policy Object with a Software Restriction for the application. There are then several ways you can apply that restriction to just a select group of users (based on their AD user account.