I would think that your users, you included would have to be part of a domain, and not log on "locally" to a shared machine. This would allow you to restrict their rights, by creating a "lower level admin group." Otherwise, if youi're only logging on locally, and if this admin has any sort of savy, they can get the apps back you don't want them to have on the task bar. You can change their taskbar, if you can log on as them, but those items can be put back if they know how to unlock and replace those icons. i think