ARP.. grin.. ok AoRP (Add or Remove Programs) Hmm yes there are several good ways to install apps on a domain.. I personally like GPO pushing MSI installers. I just have to remember to select the advanced option and tick the "uninstall when falls out of scope". and one does have to 'fiddle' with the MSI's occasionally to get them to install properly. but this falls down when the plank of a user installs something like 'smiley central'. Removal requires a visit to the machine in question, whether phisicaly or via remote software. If I was using WPI during startup, from a central folder, I could force off the system anything not on the list.. Yes the user may end up calling the helpdesk when he gets a prompt (if software uninstall is not silent), but we've got him/her by the 'sphericals' at that point. "So why did you install this unauthorised software?" A selection (WPI calling method) can be used to include software we permit. This would also work for workgroups.. Hyena get's close, lists the software, but won't allow you to do anything with it.. Expensive support tools like Kaseya can (with effort) be configured similarly and can uninstall unwanted software.. But a £10k startup cost it's not cheap.. I just love this tool (WPI) and want to get the max from it..