Current configuaration: I have an installation at home of Win7 Ultimate with SP1 (non domain joined). I have 5 user accounts. One administrator account (my profile). 4 accounts that are assigend to the "guests" GPO Issue statement: I have 4 persons in my home that use this computer that is in the living room. I also use this computer for work and changes to settings and especially browser (IE) settings cannot be allowed on any other account on this machine than Administrators. Specific information needed: 1) I have a specific tool that I use to work, and this tool shows up on all other user desktop and in program files as well as a few games and Microsoft Lync. 2) I have set parental controls for the guest profiles but since this tool loads automatically when I logon to my profile it does this automatically for all other users, and they get access denied warnings for every program that tries to load during logon. 3) I want to restrict these accounts so that they cannot see the applications that I have installed for my main profile. 4) I want to completly remove the control panel, computer and devices and printers options from the start menu. 5)I know how this is done through GPO for domain user accounts but I am struggling to find this option within Windows 7 standalone (no server to push GPO). Thanks all of you in advance.

Hi, If the computer have not joined in Domain, you need to modify Group policies via mmc manually. For 3rd point, I think the applications you installed under your profile, they cannot see them by default. Unless their installation folders are under Program Files. Juke Chou TechNet Community Support

Hi, If the computer have not joined in Domain, you need to modify Group policies via mmc manually. For 3rd point, I think the applications you installed under your profile, they cannot see them by default. Unless their installation folders are under Program Files. Juke Chou TechNet Community Support