It is a 2003 SQL OS. I will try your suggestion. In one of the computer labs, there is only one interactive educational program which opens just fine with the student logon at the workstation designated as a "restricted user" and placed in the admin group on the backend (folder on server). Was this ok or should I go back and do what you suggested? I tried this same set-up in the other computer lab, but there are two other interactive educational programs when opened, the student cannot "write" to them. It's possible there is a temp file/folder on the local workstation that might need admin access to interact properly. I am just not too sure at present and ran out of time last time while attempting the rights/permissions issue.
Another thing, I've scheduled disk cleanup every Friday on all student computers. For the lab where students are restricted users, I had to give them admin rights for that task only and the utility will launch and perform. However, this was not true about disk defragmenter even though I gave the restricted user admin privileges for that utility as well, but the utility still would not launch and the message received kept saying you had to have admin rights to run this utility. Do you suppose to run/execute disk defragmenter on C:\ the utility goes by the logon? Of course, both utilities run just fine in the computer lab wherer students still have full admin rights at the local workstation. Do you have any suggestions in this area as well?
I appreciate everyone's time and effort to help me arrive at the best set-up for student computers at our school. Right now, half of the computers are used with our ESL program and the other half with our HS students. It's the HS students I'm most worried about. Shortly, we will be adding a third computer lab for our LVN students. They, generally, should be rather trustworthy.
Anyway, thanks again for any help!