Dear Forum, Im sure there is an answer here somewhere, but I have spent several hours and have been unable to find the answer. I have Windows Vista Ultimate SP2 installed. It is on a home computer. I want to set-up a new user with limited permissions, and no access to several hard disks on the computer. I went to the advanced user passwords [control userpasswords2] settings, and added a new group "Girlfriend". I then added a new user "Sarah", and added her to the group Girlfriend. I then opened the Security Policy [secpol.msc] and added the "Girlfriend" group to the Local Security policy where there was a "User" group already added. However, once this is all applied and I go back to the windows log-on screen, the user does not show up to enable logging in to the system. Can someone please tell me what settings I am missing, or where I should be looking.? Thanks Simon

Have you had look at Windows SteadyState which is used to lock down machines, this tool is quite powerful and I am sure you will find everything you need there. More information and download from http://www.microsoft.com/windows/products/winfamily/sharedaccess/default.mspxBlogging about Windows for IT pros at www.theexperienceblog.com