I’m looking to do this also in our enterprise environment but have found stuff-all. The only options I’ve found are to lock media player to a custom skin via group policy or point the rip location to a nonexistent drive and again lock down via gp. Neither of these options is too eloquent tho. Anyone else have any ideas?