win2008 domain
win7 clients

I want to remove the run command using gpo but also allow some software (Edexcel live text for eg) to be able to open IE links to either unc paths or mapped drive paths.

currently getting 'access to this resource has been disallowed'

other GPOs hides the mapped drives and removes my computer icon but surely I don't want to enable windows key R from being active?

is there a workaround?