XP Pro Desktop Lockdown

[ITR000]

I wanted to post regarding the most efficient way to lock down a
Windows XP Pro desktop. Basically, I have 15 users connected to a
non-critical network (peer-to-peer) and would like to limit the
following items;

- disable access to drive letters other then A:
- disable access to display properties - (i.e.screen saver,
background, etc)
- disable access to most items within the control panel
- disable access to USB devices
- disable access to add/remove printers
- disable Windows function keys
- disable access to Windows explorer
- disable access to run cmd (i.e. - cmd prompt, msconfig cmd, etc,
etc)

There are other items that I would like to disable as well. I must
mention, the PC’s have two user logon options upon start up - Limited
User as well as, Administrator. I want full access to every item above
as a administrator.

I am having a issue trying to lock down items only for the limited
access user and NOT for the admin. It seems when certain items are
disabled, it is system wide rather then profile specific....

Can anyone lend some advice, perhaps a tool that has performed well...

Thanks in advance.

 

[Kelly]

Combine the edits wanted from here:
http://www.kellys-korner-xp.com/xp_tweaks.htm or script it. Added info:
http://www.dougknox.com/xp/utils/xp_securityconsole.htm

/taskbarplus!.htm