Group policy

Create a new group call GroupPolicy

Create a new user with administrator privelages and put this user in this new GroupPolicy group.

You need to set permissions on the GroupPolicy folder in c:\winnt\system32 and deny this GroupPolicy group read access to this folder.

This folder is hidden by default.

This will mean that the Group Policy will not apply to anyone in the GroupPolicy group as it doesn't have permissions to read the Group Policy files.

Then you can create the GroupPolicy with all the settings you require.

You need to have access to the Group Policy folder while you are creating the permissions, so you cannot add yourself into the new GroupPolicy group just yet, the problem is that the Group Policy starts to apply itself as you are selecting options (its refreshes itself periodically in the background), so as soon as you lock out Control Panel, you might find yourself locked out as well. This is not a problem, finish selecting the policies you require.Then log off and back on using the administrator account you created at the begining and then add yourself and the wifey to the GroupPolicy group. When you next log back in, the GroupPolicy will not be applied against your account, but it will for everyone not in the GroupPolicy group.

The GroupPolicy editor is in c:\winnt\system32\ and is called GPEDT

I personally have two batch files which automatically adds or deletes me from the Group Policy group I have created.

Its along the lines of

NET LOCALGROUP "Group Policy" administrator /add

or

NET LOCALGROUP "Group Policy" administrator /delete

This way I don't need to have access to control panel to add myself to and from the Group Policy group.

Hope this helps, butbe careful, because you can lock yourself out completely with Group Policies.

Assign the kids to the User Group.

or

Use Group Policy to restrict their access