Users must be in an application's Access Permissions list to load and use the application. Although the Application Virtualization Server Management Console does not support explicitly denying a user group access to an application, you can remove the user groups from an application’s properties to achieve this.
To deny access to an application
For an existing application, click the Applications node in the left pane.
Right-click an application in the right pane, and choose Properties. Then select the Access Permissions tab.
To remove access for a user group, highlight the user group and click Remove.
To control access to applications, you can also limit the application licenses. Setting up the proper user groups in Active Directory Domain Services provides the easiest way to grant and deny access to specific sets of users.