You locked down your users, only to find that they can double-click the Programs item on the Start menu and open Windows Explorer.

To prevent this behavior:

1. Copy / Paste the following into a NoWE.reg file:

REGEDIT4

\[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\]
"BrowserFlags"=dword:00000010
"ExplorerFlags"=dword:00000012

\[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\command\]
@=hex(2):00,00

\[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\]
@="\[ViewFolder(\"%l\", %I, %S)\]"
"NoActivateHandler"=""

\[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\application\]
@=""

\[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\ifexec\]
@="\[\]"

\[HKEY_CURRENT_USER\Software\Classes\Folder\shell\open\ddeexec\topic\]
@="AppProperties"
2. Merge the NoWE.reg file with each of your users registries.