An execution management utility designed to prevent software from
executing without the prior approval of system administrative or other
security staff. For example, the present invention can assist
corporations by enforcing policies regarding unauthorized, unlicensed, or
pirated software, such as, but not limited to, games; entertainment
software; and non-standard utilities, such as advertising-enhanced
browsers. A Windows NT based system is disclosed in which a kernel module
selectively intercepts process creation requests.