Hi all, I am looking for a way to lock down my kids pc and the things I would like to do is remove certain things, like the run command, my computer, control panel, etc. I have been trying to use gpedit.msc and I see tons of options, but what puzzles me is none of it seems to be user/group based. If I make a change in gpedit.msc, say remove "run" from the start menu, it affects ALL users (even administrator). This is a WinXP Pro system on a home network, no domain set up. Is there a piece to this puzzle I am missing that will allow me to assign these polices to a particular user and/or group? TIA,