Simple Software-restriction Policy is designed to add additional malware protection by determining what software is allowed to run and what is blocked.
Many techs are used to dealing with a friend or client who keeps running software that they shouldn't. A great example would be the many games out there that bundle third-party applications that infect your system. These are known as PUP's or Potentially Unwanted Programs.
The program is small and very simple to use. One of its benefits is that you can clock access to folders and sub-folders, rather than individual files. This is a nice way to block the download folder, for example.
Simple Software-restriction Policy can also block unintended downloads from running, prevent auto-run installs, stop programs on USB drives from launching but it can also run specified processes with limited privileges.