Is there a registry tweek that I can apply to control what
applications can run? I'm trying to demo a kiosk-type machine and I
only want my program to run on it. That is, I don't want people coming
up running Notepad or IE or anything they can do much damage with.

One thing I was thinking was to disable the Start button and hide all
the icons except the program that I want to run. Does anyone know to
do this?