is there a guide for dummies ?

logging as Admin and firing up gpedit.msc, I see
Computer configuration and User configuration;
According to what I read from the Net, User configuration refers to the User who is logon at the moment

I have 2 users on User account in this system; How do I configure policies for the User account ? Do I simply logon as Admin and configure Computer configuration so that the settings are applied globally ?
I simply want to disallow those on User account
1) to install any software
2) to burn CDs
3) to execute applications from a USB Flashdrive

tia

Log in as Administrator > Go to Start - Type Computer Management > Go to Local Users and Groups > Click Users, you see the the right on Users account.

You can right click and click properties, go to members tab, and look in the members rights policy. You can remove everything and add, USER this is set to lower level then admin, which prevents certain things.

You can check this site for USB for users

http://support.microsoft.com/default.as ... -us;823732


Try this out and see what happens

thanks for the tip and link