You should be able to login on the account you're wanting to restrict before you restrict it (so you have administrative priv's), edit the registry keys for CURRENT_USER from there, reboot, login under a different administrative account, and restrict the one you just edited.
/ –
