Being the Evil Administrator that I am

I want to stop my users from using Firefox entirely. I know its better than IE but thats another discussion.

i’ve created a GPO to block firefox under the computer config but my coworker found that if you rename the .exe it works.

2 questions –

1. Is there a way to use wildcards in the Path to stop all .exe’s from running? I tried the old *.exe and if I force an update on a client and rename firefox.exe to fire_fox.exe it works.

2. We also found that if we don’t rename the .exe but rename the folder Mozilla Firefox to MozillaFirefox the GPO no longer applies. How do we stop that while were at it.

Any assistance would be awesome.

TY all.