Yea, I can limit the screen saver via GPO which I do but a person who knew enough could copy their own and rename it. The best I can think of is just make it read only and hidden in a common location like Program Files.