When configuring a very restricted desktop for 3rd party access we configured the ‘Run Only specified Windows Applications’
Surprisingly very little actually stopped working.
However the Windows Aero.theme was no longer being applied:
Add the following executables to allow the theme to apply: shell32.dll, dwm.exe, rundll32.exe svchost.exe, regsvr32.exe in the group policy location
User Configuration> Policies > Administrative Templates > System > Run only specified Windows applications