I set up the parental controls on a standard user account in windows 7, so that the user could only run specific programs that were authorized. I then logged in to that account and tried to run several programs - nothing worked other than the ones I had disabled. Good so far.
However, then I tried to run regedit, and succeeded! Not only that, I could modify the registry!
Is this really an acceptable behaviour of a standard user account with all programs disabled? Why could I even run regedit.exe? I certainly didn't flag it as an exception to the "No programs allowed to run" rule. :(