Windows Server Hacks: Disable "Run As"
Subject:   Doesn't always work
Date:   2004-03-18 13:21:12
From:   mitchtulloch
Response to: Doesn't always work

I think that may be the way to go. I tried changing the ACL on the Runas service under Computer Configuration\Windows Settings\Security Settings\System Services in Group Policy so that the Domain Users group has Deny Full Control permission, but this doesn't prevent an ordinary user from still using Runas...