Are you installing drivers or are you using registry keys to block binaries ? What would prevent one to disable that ?
AskAdmin uses some complex methode not only one , because 1. deleting a registry key or 2. rename a blocked program can easily override protection , and it would be unacceptable
Could u add "deny internet access" feature like for admins, or allow only for normal users or allow to exec files with normal users rights only administrator wont be allow to run them to minimize security exposure