Kiosk setup on Win2000

[Tony]

Greetings!

I'm a newbie to administration and I'm learning about basic administration.
Currently I'm allowing the users group to have the default access to the
local PC. However, I want all Guests to have very little access and
ability, much like a kiosk. How do you deny Guests access to programs,
start menu, and various settings like those in the Local Computer Policy
snap-in? I realize if I were to change the settings in the Local Computer
Policy snap-in it would affect all local users. I simply want to change
settings for Guests only.

So far I've denied Guests access to many folders on the C: drive but I had
to do this for each folder's security properties. Also how do you deny them
access to drives as well?

Thanks,
Tony

 

[Herb Martin]

It's actually fairly trick. One approach is to use a "different" program
for the shell -- instead of Explorer -- in the profile.