Since you haven't told us whether you have Pro or Home:
1. If Pro, use Group Policy. Start>Run>gpedit.msc [enter]
Be careful using Group Policy since it is completely possible to lock
yourself out. For questions about group policy, post in this newsgroup:
microsoft.public.windows.group_policy
2. If Home, use either Doug Knox's Security Console or the MS Shared
Computer Toolkit.
Not allowing them to be power users or local administrators would be a great
start. Regular users still can install some software such as applications
that install to their user profile or stand alone executables. To prevent
that you can use Software Restriction Policies with path and hash rules in
XP Pro or use the free Microsoft Shared Computer Toolkit that allows SRP to
be implemented in a limited way on XP Home also. If the user must be a local
administrator then you can not realistically restrict them unless they are
clueless about the powers of the administrator account. --- Steve
