[cross posted from superuser - I believe the question is also relevant here]
I'm trying to harden a windows 7 machine, including replacing the default login shell from explorer.exe to a custom application. This part works well.
However, I also want that the administrator will still be able to manage the machine, so I modified the user specific key:
explorer.exe - but when I log on I get a single windows file explorer window, and not the full desktop.
does any one know how to configure the normal desktop shell only to a specific user?