Windows has three distinct mechanisms that it uses to restrict the abilities of users (friendly or otherwise) to view and change files, folders, and settings. These are
Access Control Lists (ACLs), which limit users' access to files, folders and registry settings.
User Permissions, which control whether or not an account can perform certain operating system functions such as logging on at the computer, logging on over the network, or installing system services.
Policies, which are registry settings whose values are used by a wide variety of system programs to “tune” the features and interface options made available to a given user. For example, policy settings can instruct the Control Panel not to ...