The setting below may be useful
Don't run specified Windows applications
User Configuration\Administrative Templates\System
Description
Prevents Windows from running the programs you specify in this policy.
If you enable this policy, users cannot run programs that you add to the
List of disallowed applications.
Note
This policy only prevents users from running programs that are started by
the Windows Explorer process. It does not prevent users from running
programs, such as Task Manager, that are started by the system process or by
other processes. Also, if you permit users to gain access to the command
prompt, Cmd.exe, this policy does not prevent them from starting programs in
the command window that they are not permitted to start by using Windows
Explorer.
When both the Run only allowed Windows applications policy and the Don't run
specified Windows applications policy are enabled, they are both applied.
Users can only run the programs listed in the Run only allowed Windows
applications policy. However, if a program in that list is prohibited by the
Don't run specified Windows applications policy, it does not run.
Related Policies
Run only allowed Windows applications
--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services
=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.