What I haven't tried, is (on nt 2k) is to detect it's presence, and then use cacls to remove all permissions to the folder but for MIS groups.

It might be installed, but it certainly will not run.
_________________________
How to ask questions the smart way <-----------> Before you ask