Under Windows 2000/XP/2003 and AD you can use group policies to disallow certain programs based on hash, certificate, path, or Internet zone rule. This would be the preferred way. And if you still have Windows 9x/NT and an NT4 domain, it's about time to get rid of it and switch to AD.
_________________________
There are two types of vessels, submarines and targets.
