WinXP SP3 - Local Security Policy

I am running Windows XP with service pack 3 on a standalone machine that is used for customers to access the internet. What we want is that the local admin to have full access to this machine but if the customers logs on then he would be restricted with access to control panel and such things. So, can anyone tell me if it is possible to apply different local security policies to different users on a standalone machine? Thanks for any information.

You can download Doug's Windows XP Security Console utility that allows you to assign various restrictions to specific users, whether you're running XP Pro or XP Home. The unlicensed version will allow you to apply a number of user specific settings, while logged on to that user's Desktop. Download it from here - http://www.dougknox.com/xp/utils/xp_securityconsole.htm

You can also try out the Windows SteadyState from microsoft which is a software that allows you to control the activity of other users of your PC. By having this tool, you can prohibit the installation of new software, changing the desktop, create a new file or folder and more. It grants you administrator rights giving you the ability to completely remove all the changes that could be performed by another user without your consent, restrict the use of the start menu, manage different profiles and the security and privacy of your computer, download it from the microsoft website.

You can also try to disable the Local Administrator Account on Windows XP by following the below method:

1. Log on as Administrator, or as a user with administrator permissions.
2. Right-click My Computer, and then click Manage.
3. In the left pane, expand the Local Users and Groups node, and then click Users.
4. In the right pane, double-click the Administrator account.
5. On the General tab, select the Account is disabled check box, and then click OK.
6. Quit the Computer Management console. The new setting takes effect the next time you attempt to log on to this computer.

More methods are described here - http://support.microsoft.com/kb/281140