I have been given to understand that there is a method of listing specific executables within the os (the rumor held that it was the msdos.sys file) to prevent that specific files execution. Has anyone heard of this – is it possible. This would be very handy in my particular environment? I have searched MSDN unsuccessfully.