Create a mandatory user profile and lock all the program groups
Delete WINFILEJEXE from the WINNT directory create a mandatory user profile that disables the File menu in Program Manager, and assign the profile to all users
Create a mandatory user profile that disables the Run command, assign this profile to all users and remove File Manager from the Main group
None of these
Create a mandatory user profile and ensure that the Deny All option is set on all of the files that the user should not be able to access