Disable explorer.exe from running for specific user - Windows XP
I have computers setup to be dumb clients, but have noticed a security flaw through the Help files in mstsc.exe. (Can't disable them as they are within mstsc.exe). You can gain access to system features, including somewhere you can type C:\ and it will launch the C:\ drive, along with explorer.exe, which would give them limited access to the system.
Explorer.exe has been replaced with mstsc.exe upon startup/logon, so it doesn't start...but this...'exploit'...can be made to override that. I don't want the users to be able to start explorer.exe at all. I've tried putting it in Group Policy as a software restriction, but that effected all accounts, including the built-in administrator account which we need to be uneffected.
Is this possible?