This message was deleted.

GPO is probably the best option here, or at least what we prefer for stuff like this. Google publishes an ADMX and there's a setting to disable it

That's probably better than we we have going on... We just don't allow it in AppLocker so it just dies when it attempts to run. Going to look at the policy now.

cool beans