I was wondering how I would restrict access to certain programs on my win2k machine, he and I both use it and I am not too keen on him accessing my ICQ, I have admin and he has user, but when I block access to icq in the group policy, it doesn't allow the admin (me) to access it either. So how do I stop standard users from accessing certain programs and features, but leaving me with access?

Im using windows 2000 pro and there are 4 other which use the pc as well. imsetup as the administrator and the the other 4 are set up as users. Well i want to now how i can stop them from installing programs and just restricting a few options. Thanks.

Well i have a brother who uses the same computer as I do. I'm have admin rights and he has user rights. If you want to deny him access to ICQ, just add his user id to the security settings of the ICQ folder and set it to deny everything. Somehow setting DENY to a user group kind of denies the admin as well.

If you just remove the user group from the permission of the folder ICQ, that user group can't access that folder. Deny option has a particular behavious that makes it deny permission to you to.