How to carefully put a "stub" on the GUI of Windows 7?

Question

System administration

So, domain, Windows.
The task is to block the GUI user remotely . In theory, you can just not let the OS boot, but this is less desirable.
Something like a porn banner that replaces a line in the browser (ie, it is written in place of explorer.exe) would be fine.
Yes, and the porn banner itself will suit if it is harmless (in other words, it does nothing but show itself - cutting off the network is generally not a problem)

Answer 1

We remotely cling to the registry, change the path to the executable file [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\ {shell}
Upload any of our files through the c$ administrative ball, for example, a SWF cartoon, specify it in the shell parameter, and instead of the working table the user will see the cartoon.
So that the user cannot run explorer.exe through the task manager, disable it:
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system {DisableTaskMgr} value 1

Answer 2

There is a corresponding policy:
C:\Windows\System32\secpol.msc
Local Policies\User Rights Assignments\Deny Log On Locally