CoreTrace has a new software-only version 6 that provides solid endpoint protection by only allowing vetted applications to run across your enterprise. There are agents for all 32-bit versions of Windows since 2000 and 64-bit Windows 7 and Server 2008.
CoreTrace Bouncer
http://CoreTrace.com
Pricing begins at $35 per endpoint