You need to prevent all users who are members of a group named Group1 from running Windows Media Player