>I've quickly implemented a GPO to hide the icon again, but I'm slightly >concerned that a user with standard privileges could initiate an installation, >and a restart, to boot.
That's a pet peeve of mine, but there is a more secure solution than yours, sorry I don't have the time to find the official docs, but a quick google shows http://goingvirtual.wordpress.com/2009/07/11/locking-down-vmware-tools/ which should get you going... Verify the params and syntax:) jlc ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~