Hi,
this is a very common task 🙂
Open MMC and add the Group Policy Editor SnapIn.
Select the local computer
and press browser, switch to the User tab and choose “No Administrators”
Define your policies.
Michael
Windows: Apply a local policy for all user expect Administrator Accounts