If you have administrativer privieldges - Use MMC, Add/
Remove Snap In, Add Group Policy, Click ok, click finish,
click close,clock ok, click User Configuration,
Administrative Template, Run only allowed Windows
Program, click add windows program, in addition to
winword.exe make VERY sure you add mmc.exe or you won't
be able to get back in to add or delete other programs.
Save changes to Console1.