Limit which applications user can see

F5ing said:

If all you want is to remove them from the start menu for other users, I think all you have to do is remove the entry from the all users start menu tree and add it to your own username start menu. At least you could do that in XP.

All users is now public in w7, so I think all you have to do is move the shortcut from C:\ProgramData\Microsoft\Windows\Start Menu\Programs to C:\Users\yourusername\AppData\Roaming\Microsoft\Windows\Start Menu\Programs.

Basically correct. Remove all items from "C:\ProgramData\Microsoft\Windows\Start Menu\Programs" and place all shortcuts in "C:\Users\Your Username\AppData\Roaming\Microsoft\Windows\Start Menu\Programs".

Then place the program shortcuts you want other users to use in "C:\Users\Other Username\AppData\Roaming\Microsoft\Windows\Start Menu\Programs" then only these programs should show on their Start menu.

A Guy said:

If that did work, wouldn't it just remove the start menu links, and not the ability to actually access the destinations through other means? A Guy

This is also correct. The users will still be able to run any application they have permissions to by the cmd line, navigating to the exe file in Explorer, etc... The links provided by A Guy in post #2 should help with this but in regards to the first link here is another one in case you find you can't run the program - Group Policy - Apply to a Specific User or Group

For removing other things from Start check out Group Policy, specifically User Configuration > Administrative Template > Start Menu and Taskbar. Only downfall with this is it will remove any items for you as well.

EDIT: Use with above link should help.

I can't find a way to remove the Control Panel though without disabling it. You could modify each users Start menu manually if there's not too many users and under Group Policy set "Prevent changes to the Taskbar and Start Menu settings" to enabled. Users would still be able to access the Control Panel by other means though and they will not be able to change any settings relating to the Start menu or Taskbar.

EDIT: Disabling Control Panel used in conjuction with Group Policy - Apply to a Specific User or Group would be a better option if it works, unless you don't want access to it then you can just disable it globally. Disabling it will prevent access to any Control Panel items including Personalize, Screen Resolution when right clicking the Desktop.

As Karl pointed out you could disable only specific Control Panel items. To disable it use "Prohibit access to the Control Panel" which can be seen in Karl's screenshot.

Duzzy,
See post #9 and play around with all the options.

That section of the Local Policy Editor which covers the control panel is quite flexible.

@Karl
I was writing my post when you posted so I did make a edit to mine after seeing yours.

Good section for disabling individual items but I can only see the one option for removing it from the Start Menu and that's to enable "Prohibit access to the Control Panel".

Although it's a good reference as the OP will probably like to implement restrictions not just remove it from the Start menu.

I'm having difficulty understanding your comment.

Please click on all of the items shown there and read the descriptive info.

Expand each of the "folders" and do same.

The OP asked

How can I limit which applications user on win 7 could see?
I have attached the screenshot as I would like user to see when he/she presses the start.

All the descriptive info I read only refers to what is displayed in the Control Panel and access restictions to Control Panel Items. Not what is displayed in the Start Menu unless I'm missing something.

Except enabling "Prohibit access to the Control Panel" will remove it from the Start Menu as well as any access to it or any items via other means.

And as I said the OP will probably like to restrict access to all items or just some not just remove it from the Start menu and that is were that section would be useful.

Does that make sense?

Access to the control panel allow the user to get around many stops you may put in.

For a very thorough attack to this overall problem and nuances, I recommend:

PolicyPak - Last-Mile Desktop and Application Lockdown