Log in under the "Administrator" account
goto "Administrative Tools" under the "Control Panel"
Open "Computer Management"
Under "Local Users and Group" create a new user
add the "Administrators" group to that new user (you should have two groups, "Users" and "Administrators")
Log out of "Administrator" and log into the new user account. It will create a new profile.
Goto Start -> Run -> "gpedit.msc"
Everything under "Computer Configuration" will affect all users on machine.
Everything under "User Configuration" will affect the current user/group.
Once you have everything set to the way you want it to be, then log off the new user account and go back under Administrator, go back to "Computer Management" and remove the "Administrators" group from the new user account.
If you find this difficult or unsure if you want to mess with the policies, you could always look into the Fortres software by
www.fortresgrand.com , with that you can lock out everything easily and still be able to do your own thing with your Administrator account.
