how to lock down xp by user account

i need to set up some laptops for a school and i want to have one user account with administrative rights for teachers and one locked down for student use. i’ve heard about using active directory on xp. does anyone know how to do this or maybe a free or opensource program that allows me to do this