With the native operating system there is no way to apply it to selected
users though you can apply it to all users other then local administrators
via enforcement setting. What may help you but not give you the flexibility
you want with SRP is to check out the free Shared Computer Toolkit. You may
find that it and managing NTFS permissions so that users/groups that you do
not want to execute a file/program in the program files folder can do what
you need. There is also a newsgroup dedicated to Shared Computer Toolkit
called Microsoft.public.windows.sharedaccess . --- Steve