[ActiveDir] Blocking IE7

[Lucas, Bryan]

I see how to block IE7 from deploying through WSUS, but what I don’t see is a way to block a user from manually installing it.   (http://www.microsoft.com/downloads/details.aspx?FamilyID=4516A6F7-5D44-482B-9DBD-869B4A90159C&displaylang=en)   Our users are 90% XP SP2 and managed through GP.  What about building a restricted software GPO that has a hash of iesetup7.exe (if that even exists)?   I want to restrict them from getting it through microsoftupdate.com as well.   Bryan Lucas Server Administrator Texas Christian University