I read this topic in a forum:
Opens the Group Policy Editor for the domain or for the local machine (gpedit.msc). Expand Administrative Templates under User Configuration. Click on System In the left pane, double-click Do not run specified Windows applications. Click on Enabled, and then click on the Show ... button (next to the list of unrecognized applications). Show contents of the window, click on the "Add ..." button Enter the executable name you want to block. For this example, the executable is sol.exe (The full path is not necessary). Add as many applications as you want to block! Accept the changes and all those applications will be blocked!.
but I can not block the * .bat files I need to put a specific name thing that skip the security DOES NOT exist any other way through programming?
It occurs to me to do a 1sec loop that removes all the * .bat from the folder in question but I think this originates an ugly memory busy. the OS does not have that specific option?