You could of course create gpo's that control what ppl CAN run, in example - ie,office etc etc - that way, even if someone clever comes up with the idea to rename the copied/moved file, there's really no sure way to run it properly. But, it smells like we're not talking real users here, since they seem to be able to copy files all over the system. I'll let someone smart find a better answer ;). Oh - and welcome to the board!
_________________________
as long as it works - why fix it?
If it doesn't work - kix-it!