I need to remove the ability of users to install or remove software, as well as protect against registry changes and system settings. When I remove a user from the admin group and place them in the power users or users group, their profile changes completely. They lose all drive mappings, desktop icons, quicklaunch items, wallpaper, etc.. I'd like to implement this without having to rebuild all the profiles. If some one can steer me in the right direction, I would be most grateful - Thank you.