Yes, if you are running W2k or XP. Read up on using
gpedit.msc, and then go start - run - type gpedit.msc
Go down to User Config .. Admin Templates,
and look carefully through all those options. Under
System, there is an option: Run Only allowed Win Apps.
Enable it, and add the exe of the program that you
will allow to run. NOW !!!!! I HAVE NEVER DONE
THIS ONE

I highly recommend ... ?? ... uhh ... well
..... I don't know if doing that will totally shut you out
or what. Messing with gpedit can do that too !!!!
But if it does not shut you out, from running gpedit
again, then just put an icon on another user desktop
for the program that you will allow, and log out of
your account, and into the "friends" account. Just for
safety, maybe also include gpedit.msc in your allow
list. Hooha! Nothing like taking a chance. Good luck.
Oh yes. When you come back just disable the "allow
list" in gpedit. Note: with a little experience, there is
probably a less "brute force" way to do this, but I
doubt it. I'm not kidding about the dangers of gpedit.
READ FIRST
johns