Thanks. I've done that. The User account is a member of the 'Users' group, whereas the Administrator account is a member of the 'Administrators' group. However, that still doesn't block everything I want to block. I can see where this would be useful to prevent (for example) User access to REGEDIT or certain other apps. But I want to actually remove certain things from the UI, such as the entire 'Settings' menu, blocking the right-click menu on the desktop, blocking the right-click menu on the taskbar, etc. Tim Rude