Not parental control, lock out setting and access to certain programs?

I've set up computers already imaged this was so I don't know how to do it.

How can I make a profile, that can't access anything unless they can access it on the desktop?

So this user is not using parental control. I want to be able to change settings in admin profile. But user profile they can not access anything unless it can be run from desktop. Thank you!!!

Tookeri said:

Hi and welcome to SevenForums!

Usually you do it with Group Policy, depending on what Windows version it is. In Pro and higher take a look at Software Restriction Policy and AppLocker. More info: Best protection against malware?

A good setup shouldn't restrict apps to only the desktop, but instead look at where the programs are located by the shortcuts on the desktop.

Thanks I played with the Group Policy way, much easier way and does exactly what I want.
But some changes apply to the Admin profile. How do I just apply GP for the other profile I created? Btw the user profile I have set up as guest.

Tookeri said:

You should look for options to limit it to only certain users/groups.

For Software Restriction Policy for example there's a different setting(marked in red):

Thanks that would've worked but I am not using applocker, or restricting apps. I found it easier to manage making it no possible to go anywhere or run any programs other than what I have on the desktop. How would I apply all the changes here to user profile and not local admin?