hi all, i'm the admin of a mac lab at my university. users use one specific user account - is there a way to prevent this user from opening .dmg files? people can run apps right from a mounted dmg and i've caught a couple of people trying to download torrents here. though they don't have permission to move an app into the applications folder, they can simply run it off the desktop. thanks!