10) have a lockdown script - where unnecessary .exe's are removed that your software can get by without ie. if possible, and you intend to install no new software - remove hostname.exe remove pluginplay.exe remove rundll32.exe remove winepath.exe remove svchost.exe or replace svchost.exe with hardcoded path to compensate But this may mean that you cannot accept wine upgrades......
