Disabling running EXE files from removable drives

Thank you very much to all of you for your replies,

We have revised all our software restrictions rules and we recreated all the paths following a read from the technet article (cheers Smurf). We are using hash rules for all the exe files found over the network and we have also disabled the ability of running apps from the user's directory as well as from CD Roms, Floppy drives and from where the pen drives are tend to be mapped in our machines using Paths rules. All this gets done through GPO in AD.

Though it could have been a better way, so far is doing the job until we manage to get hold to the software or until the kids find their way out

Thanks again for your help,

Ed