Quote Originally Posted by Ken Moore
Thanks very much for that. Some very useful info. I'd done stuff in the dim and distant (W98) past with policies but hadn't had a need to get involved under W2K or XP.

I assume (and hence your warning) that this configuration applies to all users?

Ken.
It does, indeed. If you create a list of allowed programs without adding gpedit.msc to the list then you cannot run gpedit.msc to change the list. You can, presumably, but not easily afaik, edit the registry to undo this, but only if regedit (or similar) was added to the list of allowable programs. In other words, Handle With Care.