Windows 10: Blcok standard user from control panel locking admin out too..HELP!

Hi everyone first post here, and first time here as well. Thank you.

I am trying to "lock down" standard user accounts from being able to use the control panel sop they cannot change settings on a shared work computer. I created the account and went into grpedit.msc and "enabled" the lockout control panel option (don't remember exact verbiage) and when I restarted the computer All the accounts were locked from the control panel.

So I "unhid" the main Administrator account and tried with it and it was also locked out. The only way I could fix this issue was to get back into grpedit.msc and undo the option to hide. So now Id like to know how I can do this. Basically the business owner wants to just block certain stuff from "public users" so they cant install/uninstall or get into settings etc etc.

Maybe there is a better way of doing this? Can anyone shed some ideas or provide alternative options...the customer wants it simple and non confusing as possible..small business..nothing fancy.

Thank you so much for any help you can provide.

:)

 

new administrator cannot log in

So I wanted to change the admin account on my comp.

I did this through the control panel.

Then hit Windows+L

then clicked the new admin account to log in.

Cannot log in due to password incorrect.

Logged back in under standard account.

Reset password on admin email. All good there.

Still cannot log in as admin.

So now I am locked out as an admin on my own comp...

Feeeling silly

Any ideas?

 

Permission Granted to Write to Deep AppData Folder Structure but Denied ?

For both Admin and Standard user, full control has always been enabled, although grayed out ?