How do I restrict a single user, (but not the administrator of that computer) from access to start menu? They only have shortcuts on the desktop such as MS Works, Internet Explorer. No access to My Computer, Control Panel or any other software. USB should be disabled.