why not do it the other way round like just specify the list of programs that you want the users to be able to run

if can be done using group policies in win2k / winxp
additionally you can setup many restrictions that can lockdown the windows server / workstation airtght !

-aditya

-----Original ...

[ more ]