Create a local group for each application, like: Visio Users
Go to \Program Files\Visio
ACL the Visio Folder with:
Administrators - Full Control (always need this 😀)
System - Full Control (for backup/anti-virus)
Visio Users - Full Control (this may be more than they need, but it should allow them to work.)
This is a back-door way of doing it, I'm sure there's a better way of doing it, I just don't remember what it is.