Once these GPOs get synchronized down to your machines — this can take up to three reboots to happen, so allow some time — when users attempt to open executables from email attachments, they’ll get an error saying their administrator has blocked the program. This will s...