Acidus wrote:
] ] Trust-no-exe is a executable file filter. It attaches to
] ] the operating system and filters all executable files, be
] ] it .exe .com .dll .drv .sys .dpl etc from all drives and
] ] all network shares against a list of files or paths, you,
] ] the administrator provide as trusted applications. If a
] ] prohibited executable (one not in the allow list or one
] ] explicitly defined in the deny list) is loaded, a popup
] ] box informs the user with an intelligent message that can
] ] be customised to your site.
]
] Interesting option for SysAdmins to prevent users from
] executing programs in Windows, even programs on non-NTFS
] partitions.

It seems if you are going this route, you might as well do full TPE style stuff a la netbsd et al, as I would imagine the additional code required would be marginal.

http://www.users.on.net/~blymn/veriexec/