Lock down the desktop under Group Policy

[ewhubby]

I started using MMC for group policy and want to disable users from moving, deleting icons on the desktop. Is there a way to do this? Also does anyone have any suggestions what items in the policy manager that should be disabled/enabled for a more secure system? Finally, I am interested in any suggestions in locking down IE so that users will not install adware, but many users need to access sites that may require downloads.

Thanks,
Mike

 

[headsup7]

are u running a 2003 server???? does the machine belong to a domain??

I haven't failed, I've found 10,000 ways that don't work.
Thomas Edison (1847-1931)
Heads

 

[bcastner]

Security GPOs, including locking desktop appearance:

http://www.sans.org/rr/papers/56/313.pdf

Common Scenarios GPO Templates:

http://www.microsoft.com/downloads/...45-8aa6-4775-9208-c681a7043292&displaylang=en

NSA Security GPO Recommendations for XP:

http://www.nsa.gov/notices/notic00004.cfm?Address=/snac/os/winxp/winxp.pdf

 

[ewhubby]

The computers authenticate to a domain.

 

[ewhubby]

Sorry, the computers authenticate to a NT 4 server.