Way i would do it is set up another user. Right click on folders you want to protect, go to the security tab and edit the settings so that that user only has read access. Not sure about protecting the settings themselves though... i assume if you create a non administrator account they don't have access to those settings? (EDIT - a guest account has no access to settings, so enable the guest account then set access permissions and lock your account with a password possibly?)