is this script possible

I do some work for a non for profit group. they have windows 2003 sbs with
exchange. what i want to do is limit what the users can do on the local
machines...such as...install apps, save any data to the local machines, not
be able to play games, have access to only certain items on the server, and
also have access to their email on whatever machine they sit at. and also
make it so that their setting are on a computer when they log into it.
meaning if they log into a computer thats not at their desk they get their
settings.and also have access to internet and need admin aproval to install
a plugin they might need on a webiste. users machines are windows xp pro.

I remember when i was in school and the desktops were windows 200 pro
computers thats how they were setup. im just trying to limit what the users
can do.

please let me know if this is even possible and how i can go about making
this happen.


thanks
Steve

Youri
Sat Nov 11 13:41:36 CST 2006

Stephen a écrit :
> I do some work for a non for profit group. they have windows 2003 sbs with
> exchange. what i want to do is limit what the users can do on the local
> machines...such as...install apps, save any data to the local machines, not
> be able to play games, have access to only certain items on the server, and
> also have access to their email on whatever machine they sit at. and also
> make it so that their setting are on a computer when they log into it.
> meaning if they log into a computer thats not at their desk they get their
> settings.and also have access to internet and need admin aproval to install
> a plugin they might need on a webiste. users machines are windows xp pro.
>
> I remember when i was in school and the desktops were windows 200 pro
> computers thats how they were setup. im just trying to limit what the users
> can do.
>
> please let me know if this is even possible and how i can go about making
> this happen.
>
>
> thanks
> Steve
>
>
I assume the wk stations run XP. The solution is to use the ntfs rights
and the gpo's. Google these words.

Regards

Phil