You can use Application Launcher in place of Windows Explorer (the default Windows shell) to further restrict user access to applications on Windows 95/98 or Windows NT/2000/XP/XP workstations.
Copy the following files to the locations specified.
Open the workstation's SYSTEM.INI file (typically, C:\WINDOWS\SYSTEM.INI) with a text editor.
Replace the SHELL=EXPLORER.EXE line with the following line:
SHELL=C:\NOVELL\CLIENT32\NALWIN32.EXE
Save and close the SYSTEM.INI file.
Restart Windows.
Copy the following files to the locations specified.
Run REGEDIT.EXE and locate the following setting:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Modify the SHELL value as follows:
SHELL=C:\WINNT\SYSTEM32\NALWIN32.EXE
Close REGEDIT.EXE.
Restart Windows.