Limit application use/location

All, I'm curious if there's a way to limit people to only running applications that exist within /Applications, and therefore make it so they can't run them from their home folder. Is this possible with MCX or something similar (I know you can make a list of allowed apps... but that's kinda time consuming).