Well I figure UAC is a req for start menu and without UAC users can't elevate or copy stuff, so people remove UAC and need to replace the start menu as a result. A simple registry tweak can deny elevation to users and you can also set UAC to always notify, in which case it will ask for elevation on copy procedures. Furthermore, you can simply deny logon to users in security policy. If I get this correctly? It's not a recommended procedure, but you could also set deny permissions to users to logonui.exe?