A Microsoft usa uma ferramenta chamada "Steady State" para atender a essa necessidade. Embora não funcione mais no Windows 7, a Microsoft publicou um artigo sobre como realizar a mesma coisa usando recursos nativos do Windows 7 e ferramentas gratuitas.
Este artigo está disponível diretamente na Microsoft no link . A Visão Geral é fornecida aqui:
Windows SteadyState does not support Windows 7; however, many of its features can be replicated by using native Windows 7 features and free tools from Microsoft. This document is intended primarily for IT pros who configure shared-computer access in business environments, but partners who support shared-computer access in schools, libraries, and Internet cafes will also find the information useful. The document set includes:
Creating a Steady State by Using Microsoft Technologies (this document), which describes the native Windows 7 features and free tools from Microsoft that you can use to create a steady state on computers running Windows 7.
Group Policy Settings for Creating a Steady State, which is a reference that describes Group Policy settings that you can use to configure computer and user settings and prevent users from changing those settings.
The SteadyState Reference worksheet (.xlsx file), which you can use to look up and filter settings that this document and the reference describe. For example, you can quickly find information about settings that are related to Start Menu restrictions.