Hi All.
First off, I want to apologize if this is the wrong area to write this thread.

Now my question is fairly simple. I am a new intern at my workplace working under ITs. My boss wants me to use Group Policy to lockdown a computer for incoming interns, so they cannot download, install, music/video listening and streaming online or offline, etc. This will be use to image computer with restrictions. He also wants them to have admin rights but still have restrictions. I been able to do a little of it except that these restrictions get applied to the admin account as well. For example, if I lock CMD, even admin cannot use it. Is their a way to fix this?

We are working in a Workgroup(s) environment. I believe their is no domain. I am settings the restrictions on a Window XP Pro SP3.

Please any help will be appreciated.
Thank You.