Restrict users from being able to create their own login items. Additionally, holding the shift key during login prevents apps from opening automatically .