More details please.
Is this a domain environment? What users do you want
this to apply to? Are you talking about the accessories
that come with XP, and do you mean all of them?
Use NTFS, go find each accessory you want to deny, and
change the NTFS permissions so that only the
administrators group and SYSTEM have Execute permission,
so all others can't run them.
You can use the cacls utility and a batch file to run
this on multiple machines.
