You will need to modify ntfs permissions on those applications so that a user does
not have execute permissions. You may also want to investigate settings in Group
Policy under user configuration/administrative templates/system to disable command
prompt which may also help, if they do not need it or batch files are not run on the
computer. --- Steve