This message was deleted.

@Nick Casagrande We cheat...we disable the Settings and Control Panel, and only allow certain apps. Then we use WEM to populate a shortcut on their start menu that points here: %windir%\explorer.exe shell:::{2227a280-3aea-1069-a2de-08002b30309d}