Take a look at @ckrusen comment on your post from last week. If you follow those steps it will block their access to the programs from the Open In/With.
Make sure you didn’t just add the disallow at the top level. You have to add it to all security IDs. Adding only to the top level won’t block their access.