Hello,

I have a Windows 2000 Server, and approx 35 PCs, which are all on the Domain and all users log on to the Windows 2000 Server. 70% of the Computers are Windows XP Pro and by July all will be Windows XP PRO, and the other 30% is Windows 98.

1. Anyway, my question is this, I am trying to stop users from executing exe's and programs that I do not went them to be able to execute. And I also would like my users to NOT be able to download files from the web, or allow ACTIVE X components.

2. I want it so that only ADMINISTRATORS are able to load any kind of software on to the machine.


Now all of the computers have to log on the Windows 2000 Server to gain access to the computer that they are moving so I would like to do this from the server. I want to be able to do this from the Group Policies that the Windows XP get from the Windows 2000 Server when they log on.

Can anyone send me any information on doing this, a website, a guide, or anything on possibly doing this or anything similar to this.

Thanks.
Any help or suggestions are welcome.

Andrew