I have recently deployed the rogue process template to stop students
running halo and such games from USB pens, etc and it worked a treat
for the first day. It was such a victory for ICT support!

However, the little imps have soon worked out that if they rename their
game file winword.exe they can launch their program! I guess I was
hoping that the process name was hard coded into the app and that a
simple rename would not break the system.

Anybody else found a work-around?

Also, I have to have winword, excel, etc in the exceptions list so they
can launch documents directly from their user area.

I am gutted!