I thought this was a pretty interesting piece of software, the company claims it will prevent any program from starting unless you have said it is a install you have done.

In theory this would protect you from files that have been transfered to your machine and executed with malicious intent.

The personal addition is free

I am not to sure how this piece of software would work on a server enviroment.

Abtrusion Software