I need to block my domain users from installing unauthorized software to their profiles such as Google Chrome, Google Talk, etc... As the application installs to their profile I am having trouble finding a good way of preventing them from installing it. I have searched around and haven't found any elegant solutions yet. Thanks!
Enable "Software Restriction Policy" in Group Policy - make sure you customize as needed if you have binaries in non-standard locations (Program Files, Windows dir etc is automatically included).
Edit: For clarity to future readers, one point brought up in comments is that you should run Software Execution Policy in a whitelist mode. This means blocking every single executable file, except those you allow. A reminder here is to include important directories that normal users can't write to (Program Files, Windows directory etc).