Registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Parameter: DisableLockWorkstation
Type: string
Description:
Set this value to 1 to disable locking machines from the Windows NT Security dialog box.


Registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Parameter: DisableChangePassword
Type: string
Description:
Set this value to 1 to disable the 'Change Password' button on the Windows NT Security dialog box.


Registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\System
Parameter: DisableTaskMgr
Type: string
Description:
Set this value to 1 to disable Task Manager to view processes, applications running, and make changes to the priority or state of the individual processes.


Registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Parameter: DisableRegistryTools
Type: string
Description:
Set this value to 1 to disable running Regedit.exe or Regedt32.exe to modify the registry. Warning: Be careful with this setting and make sure you don't lock yourself of the registry.


Registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun
Parameter: Default
Type: string
Description:
To allow run some programs after setting Restrict Access to "1" it is need to create a new parameter for each program named by increasing number, for example: "1"="RegEdit.exe""2"="RegTune.exe""2"="Calc.exe""3"="winword.exe" ...Do not forget to include either "regedit.exe" or "RegTune.exe" name because you'll can't make changes to registry any more.Reboot the system.


Registry key: HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
Parameter: RestrictRun
Type: string
Description:
To prevent users running any program it is possible to restrict run access by set of programs defined by you. Set string parameter to "1" (create if it is not exists). Then define the programs allowed to run (see subkey). To allow run any program set the parameter to "0". Note: user may rename any program to allowed program name, for example to "Winword.exe".