If there on a domain a GPO would be the best way. Go to the OU or group you want to apply it to, then edit group policys make a new policy, lets say No outlook. Then you get the normal gpo screen go to computer config, select admin templates, system. One of the options should be dont run specified windows apps. Click on it and edit as needed. Apply it to the OU and your done. But, if your not on a domain then you can still use gpedit on the local mach, but you will have to touch each one.