I am new to Windows 2k Server. My question is how do I setup a GPO to prevent users from changing their desktops, installing programs and any other thing my boss would like to control?