What if we use Group Policy to not allow the program to start up in the first place. It willhave to be done for each new version...but that is the lesser of the two evils. You can have it check the hash...so even if the user changes the exe name it will not open.