How/what restrictions can be set in winxp/7 ? - please guide

[anfjavid]

hello guys, recently built two systems for my shop. I will use both Winxp/7. Now i want to restrict my shop staff from using certain features like software installation, device manager, using removable media, etc. Also i want to know what all restrictions can be imposed when a PC will be used for commercial purpose. Please guide me on how to do this both in WINXP/7.

Is there any 3rd party software to do this ?. I have heard about tweakUI but i dont know how effective it would be . Its very painful/tedious to search the administrative tools in XP/7 for disabling/restricting these features. So please guide me. Only after imposing these restrictions the PC will be installed in my shop. So its urgent.

Please pour your valuable suggestions friends.

 

[Sei]

Create a guest account for your employees (assuming you want restrictions on them) and keep the administrator account password protected. Nothing else needed I guess.

 

[Gaurish]

Windows 7 has a nice built in feature called User account Control(UAC) http://windows.microsoft.com/en-us/windows7/What-is-User-Account-Control

to setup, goto Start --> Control Panel --> User accounts and family safety

For Window XP, you have to set security restrictions manually via Group Polices

to start, GOto Start --> run --> type "gpedit"