Register now or log in to join your professional community.
restrict end users with relevant level of privilages for avoiding unknown application installation.
enable always antivirus solutions and keep it up to date
the best option is to use monitoring software, or event manager.