Restricting access in WinXP Pro... Help please.

[crashwg]

>>WARNING<<
This topic is a bit long.  You might not want to bother reading it unless you think you can help and/or you're very bored.

So I'm in the process of refurbing my in-law's kids computer.  It's not the first time I've done this for them and it's kinda getting old.  What I've done in the past is to create two user accounts, mine which has administration privileges and a second one that has limited access.  They still manage to frig it up every time so I'm trying to cut off access to as many things as I can that might lead to this again.

So I've been reading just about everything I can find looking for ways to disable access to things like the control panel and the task manager...  I found this:
http://www.theeldergeek.com/group_policy_for_windows_xp_prof.htm

I read through it and all sounded good until I got to the last page where it said that you can't create individual group policies for each user.  The author then goes on to say that you can basically separate into two groups, administrators and non-administrators by changing the read access to deny for the administrators on the folder that contains the User Group Policy.  I got my hopes up at this point, then I tried to implement this only to find that I have no "security" tab for the C:\Windows\System32\GroupPolicy folder but instead a "sharing and security" tab that doesn't have any setting relating to which users have access or not.

So now I'm stuck.  I thought I might have had the solution but I'm back at square one I guess...

Any ideas?

[Jouster]

Start charging real rates...they'll call someone else.   

Jouster

[Jouster]

Ohhh...just thought of something else that I like to do that's fun...especially when dealing with other people's systems.

Search for the porn on the system and blackmail them...that'll probably stop the "hey, we smurfed up our system again, can you come fix it?" call.  Translation for the non-computer nerd..."I was checking out this killer midget/bestiality/fetish website when my system started acting funny...so I killed the power to the machine and waited for the kid to start it up and blamed it on him."

Or tell them to use the trusty "fix disk" in DOS.   

Jouster

[NightGod]

Open Windows Explorer:

Tools | Folder Options...

View tab

Scroll to the bottom, uncheck "Use simple file sharing (Recommended)"

OK

And yer set...that'll be $50.

[lanman31337]

Save a copy of the unaltered group policy on the admin desktop.  lock everything down, and save a copy and call it lockdown.  when you need it locked down, run that group policy.  when you need it off, just double click the default one and you'll be golden!