>We have a system that runs full screen. At some locations (those that have problems) users have learned that they can hit the Windows Start key, or Ctrl-Esc and get to the start button. From there they can run anything. Mostly IE.

Kenneth,

Sounds like you would need to look into editing group policies, either on the server at the domain level (if applicable) or on the standalone workstation.

If you run GPEDIT.MSC on your machine you'll get an idea of what kind of policies are available.

Laterness,
Jon