You locked down your users, only to find that they can double-click the Programs item on the Start menu and open Windows Explorer.

To prevent this behavior:

1. Copy / Paste the following into a NoWE.reg file:

REGEDIT4                              \[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\]                              "BrowserFlags"=dword:00000010                              "ExplorerFlags"=dword:00000012                              \[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\command\]                              @=hex(2):00,00                              \[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\]                              @="\[ViewFolder(\"%l\", %I, %S)\]"                              "NoActivateHandler"=""                              \[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\application\]                              @=""                              \[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\ifexec\]                              @="\[\]"                              \[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\topic\]                              @="AppProperties"
2. Merge the NoWE.reg file with each of your users registries.