setup a laptop so that no apps can be used without permission

I want to setup my laptop so that no one can add or remove a program plus I want to set it up so that u cant use any program or app on the laptop only with special permission so he use can open a browser or media player if he does not have permission for that program or app