Why on earth would you want to emasculate your WinXP system like this? I can understand why you might want to keep people out of the registry editor and system policies, but shouldn't that be possible from the User Accounts CPL? Isn't that what administrative privileges are there for? I do a lot of work at a college campus, and let me tell you, to an experienced user, ***NOTHING*** is as infuriating as some micromanaging sysadmin disabling your keyboard shortcuts.