I'm working on configuring a kiosk PC at work. The only big problem I've run into is that I can't seem to disable the shutdown button in the control+alt+delete menu without also disabling the power button on the computer itself (so only employees can shut it down). Disabling the control+alt+delete menu entirely for specific users is also acceptable.

The only real answer I've found involves writing my own GINA stub, and that's a bit beyond the scope of the project (and my abilities).

Additional Details: The explorer shell isn't used at all, A program that relaunches the kiosk application if it dies is used as the shell. The computer will also be locked in a cabinet, leaving the users access to only the monitor and kb/mouse.