I've also been looking for ways to manage this. We have some students running Small Basic which seems to compile an exe in to the users home directory and then attempts to run it. I considered going down a VM route but have also been looking at Sandbox applications like Sandboxie. Has anyone taken this approach?