Sure, heres how I started.
My boss asked me to lock down the workstation, mind you there was no server involved. He wanted to me to restrict different profiles from access different parts of windows.
Example: Admin everything
user1 no access to admin tools
user2 no access to anything except there documents.
Start with that, it will give you a good understanding of user access rights.