Oh yeah - but i don't let customers do any installations of any products whilst any app masking rules are in play (it kicked my ass when i forgot to exclude Admins first time round) - I havent had to do redirect rules with office as yet, but the masking has been quite basic - grab the exe's, grab all the relevant registry keys etc and simply hide - seems to be OK to date?