I'm looking for a way to lock down users from right clicking my computer and selecting properties. I have it to the point where they can right click on it and get to properties but when the window comes up they only have View rights. I don't want the window up at all. As view rights still gives them alot of information about my system, as well as they can create/remove temp folders/files

Second Issue
I'm looking for a way to lock down users to only log into a specific machine. Problem is when I do it through AD my handheld users that sync via port 135 cannot sync anymore... Any ideas would be appreciated