Use this:
Restrict Users from Running Specific Applications
==========================================
Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer.Value
Name: DisallowRun
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Policies\Explorer. Create a new DWORD value and name it "DisallowRun"
set the value to "1" to enable application restrictions or "0" to allow
all applications to run.
Then create a new sub-key called
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\
Policies\Explorer\DisallowRun and define the applications the are to be
restricted. Creating a new string value for each application, named as
consecutive numbers, and setting the value to the filename to be
restriced (e.g. "regedit.exe"). Restart Windows for the changes to take
effect.
Restrict Applications Users Can Run
===============================
Start/Run/Regedit
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer.
Value Name: RestrictRun Open your registry and find the key
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Policies\Explorer] Create a new DWORD value and name it "RestrictRun"
set the value to "1" to enable application restrictions or "0" to allow
all applications to run.
Then create a new sub-key called
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion
\Policies\Explorer\RestrictRun] and define the applications that are
allowed. Creating a new string value for each application, named as
consecutive numbers, and setting the value to the filename to be allowed
(e.g. "regedit.exe"). Restart Windows for the changes to take effect.
Note: If you are the person who applies Group Policy, do not apply this
policy to yourself. If applied too broadly, this policy can prevent
administrators from running Group Policy or the registry editors. As a
result, once applied, you cannot change this policy except by
reinstalling Windows.
