Having a strict policy which clearly lays out rules and guidance is one way of stopping any employee from downloading software or applications that are not company approved. In fact, you could restrict all users from having the admin rights to do this – leaving it to the designated IT person.