Note: If the user still has access to the MS-DOS prompt icon or command prompt, the user can start unauthorized applications. 

Key:[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
Value Name: NoRun
Data Type: REG_DWORD
Data:(0 = disabled, 1 = enabled)

Back to Windows Tweaks