System Preferences --> Security & Privacy --> General --> Allow apps downloaded from Mac App Store.
This will keep them from being able to download anything that isn't on the app store. It's pretty simple for you to override it in a pinch if need be. I use it on my parents iMac so I don't come home to anything they've managed to download through a popup or some damn thing.
|