Thank you so much for your reply. It was such a big help as I was not aware of Windows Client Configuration policy. It seems that it worked however the customer is more interested in monitoring than controlling and blocking. So they use Any Data option to monitor. Any idea how to have the least possible incident load on clients?