Thanks for your replies but I was hoping it would be possible to restrict IE just by merging a reg file (simiular to the way you can lock-down NT)