it would be easier to use the permission settings under sharing in the property tab of each application you want to restrict .
Just right click the programs main folder in Explorer.
Be sure to log on as Administrator.
well, google is your friend amongst other things. As admin you can always restrict a user profile, and the rest can be done via reghacks (usually using regedt32, not regedit)