Vmware lab or workstation would be acceptable. You can lock down the machine and make them work within the vm, plus it isolates the environment and you could always roll back changes if needed within the vm.
The other way is through the company policy. If the program is found then it is to be removed by the user who installed it and if not then a nice shiny new 'image' is sent down over ris or ghost or whatever to clear it up for them. I know people would hate it, but they would unlikely make the mistake twice. ~ Upgrade to Next Generation Antispam/Antivirus with Ninja! ~ ~ <http://www.sunbelt-software.com/SunbeltMessagingNinja.cfm> ~
