I want to restrict few standard users on a local computers. The computer is running win7 ULT and not in a network/domain. The standard user should be unable to use few options like:- -Write protection on USB disk/drive -No pinning of the programs -Disable Control panel, Music , Computer, Document icons from startup How should I go about it? If I Enable/Disbale these Policies through Administrative Template on Local Group Policies [gpedit.mmc]-Computer or User, would the local Administrator’s account also be affected. Do I have to create a new mmc for those particular users , but how? What steps should be taken in win7. Thanks

Hi, Try the following procedure: 1. Open a new mmc instance (MMC.EXE) 2. Choose File > Add / remove Snap-in 3. Select the Group Policy Object snap in. 4. Automaticly a wizzard will popup, click on the button Browse. 5. Select the users tab, select for example the "Non-Administrators group" 6. Click OK. 7. Click Finish. 8. Click OK 9. Edit the GPO's that you want and then close the MMC console. 10. Done :) More info is aviable on Technet: http://technet.microsoft.com/en-us/library/cc766291(WS.10).aspx Or here is another tutorial http://www.sevenforums.com/tutorials/101869-local-group-policies-apply-all-users-except-administrators.html Kind Regards DFT IM me - TWiTTer: @DFTER

This one is good; Or here is another tutorial http://www.sevenforums.com/tutorials/101869-local-group-policies-apply-all-users-except-administrators.html