I know you could do this in Win9x days, but not sure about XP

Basically customer wants a QUICK and EASY way to only allow the users to
run what shows up in the NAL.

Normally I'd mess around with GPO and profiles and whatnot, but that's
very time consuming.

My guess is I can use ZEN to deal with the DLU and possibly just show
the NAL and use the "rogue" process stuff?