Well if you go into the local computer policy through the MMC snap-in, look
in User Configuration, Administrative Templates, Start Menu & Taskbar,
you'll find the 'Remove Run menu from Start Menu' option.
That may do the trick, though I can't see any way of specifying which user
it applies to, rather than it just applying to everyone.
