Is this a business for your business? I do not agree with the fact that they have the ability to install programs. That’s a security risk. But anyway, have you tried blocking port 5222?
Do you have a proxy server? If you do, you can create an access rule to deny any urls that start with http://talk.google.com and https://talk.google.com.