You can define filenames and applications where the user under
whose profile you set it is restricted to run the applications you specify.
To set this restriction navigate along:

- HKEY_CURRENT_USER\Software\Microsoft\Windows
\CurrentVersion\Policies\Explorer

Create here in the right pane a new REG_DWORD [DWord Value] (right
click , new , DWORD) and name it:DisallowRun.Doubleclick it and set it's
value to 1 enable restrictions.0 disables them.

Now create in the left pane under the Explorer key a new subkey
and name it:
DisallowRun

In the right pane create under this new subkey a REG_SZ [String Value]
entry for each programm you want to restrict.Give the subkeys
consicutive numbers as names.(1,2,3,4 etc.).Doubleclick the entries and
set their value to the executable of the application you want to restrict.
Example:notepad.exe.

This requires a restart !