williamh wrote: > This could probably be broken by a knowledgeable and determined frodo, but it would be easier for frodo to install his own version of wine in his home directory. Exactly. All BS of company policies aside, unless OP restricts users from creating any files on hist system it is impossible to make Wine run only "approved" applications. Yes there are ways to "cheat" inexperienced users, but that won't work for power users, who know how to use google and/or can figure out how to compile custom Wine version.