What's the best way (no software or free/easily crackable software

) of completely stopping access on an account to folders, INCLUDING system folders such as Program Files. No offence but I've been changing settings/searching for ages so don't need suggestions such as Right click > Make this folder private
Also, ways of blocking access to certain programs would be good.
Basically, making a user account with EXTREMELY few privileges - just to IE ideally.
(I have full administrative access etc)
Thanks a lot
