Disable repair tools on boot menu of dual Windows 10 boot

[Zourous]

So this is known as the "Windows boot manager". I'm setting up an image for Students to eventually use which includes two installs of Windows 10. The problem I've got is that on the boot menu you can also select the repair tools that students could use to wipe the whole PC, so not a good idea. I can't see a way of disabling them. Had a look at BCDedit and can't see a way or option of doing it. Not a common task I know, but I'm hoping someone might be able to help as I've googled my hands off with this one.

[BOOT]

Powershell script I use:

New-Item -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bootim.exe"
Set-ItemProperty -Path "HKLM:\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\bootim.exe" -Name "Debugger" -Type "String" -Value "taskill /F /IM bootim.exe" -Force

Easily undone if you need to access those options.

[Zourous]

Erm... thanks but that just disables the whole boot menu. Just looking to disable the repair tools that you can access off it.