HKEY_CURRENT_USER\Software\Microsoft\Windows\Curre ntVersion\Policies\Explorer
"NoClose"=dword:00000001
Policy
isable and remove the Turn Off Computer button
Description:Removes the "Turn Off Computer" button from the Start Menu and
prevents shutting down Windows using the standard shutdown user interface.
Registry Value:"NoClose"
This is where the policy makes the setting in the registry. You have several options.....
You can enforce this in the registry of the users you choose.....
You can update the Default User profile, so it will enforce on each new user created.
You can use GPO to enforce , but with workgroups it is pretty much all or nothing.
I think your best bet is a current user setting. Keep in mind, you will have to explicitly add theier userid in the registry keys permissions. This is one area of the registry that the current user cannot update, for the obvious reasons.
You cannot do a runas opn regedit for a HKCU setting, as it will pull the HKCU of the person using the RunAs, not the one logged in.