Group Policy: Blocking Outlook Express via Group Policy

Blocking users from running Outlook Express on their computers is probably a good security practice for many organizations.

Doing so is a simple matter of opening the group policy editor, and browsing to the following location:

User\Administrative Templates\System\Don't run specified Windows applications
The executable name for Outlook Express is “msimn.exe”.

And remember, you can test the application of this GPO on a small group by just applying it to the appropriate OU, and then enabling security filtering for a group that contains users who would be good to test with.