1. Log on as Administrator
2. From Explorer > Tools > Folder Options > View, modify folder view to show hidden files and folders
3. Create Group Policy for restrictions you want:
a. Start > Run > MMC >
b. Console > Add/Remove Snap-in > Group Policy > finish > close > OK
c. Expand User Config\Admin Templates
d. Look in Control Panel and Network for the policies you want to set. Dbl-clk a policy in the right pane to set it and get explanation of what it does.
e. Exit and save the consoleas MYPOL.msc
f. Reboot the computer to apply policy
4. From Explorer, navigate to C:\Winnt\System32\GroupPolicy
5. Right-Mouse-Clk the Group Policy folder > Properties > Security. Check DENY for the Administrator?s READ permission.
The laststep prevents the policy from applying to the administrator. Before you can make changes to the policy by opening the console you saved in 3e, you will need to restore the Admin?s Full Control permissions.