Group Policy

I need to create an XP pro Machine that leaves the Administrator account alone but lets me make a user account like a Kiosk. I cant use MMC snap in to edit the group policy without effecting both accounts. But i need to have both accounts this is in a high traffic area the Admin account is there so i can frequently update what apps that will run on the user but the User needs to only run these apps and allow nothing else. this includes logging out or shutdowns. Any help is greatly appretiated.