an anti-exe/default-deny solution (whitelist) is generally better for network domains managed by an it department in business environments, public institutions and on publicly accessible machines. the it dep decides what and what not to run on machines on their network and users can't interfere with those settings. a bb, on the other hand, is a better option for computer-savvy folks who know what to do when they're prompted to block or allow a certain process/program/etc. on their pc's on a home network. @guest welcome back, brother. good to see you again.
