Thanks for replying, that helps to organize my thoughs
1) Yes I use filtering software named N2H2 but it doesn't seem to have the posibility to lock file extenssions, also I make sure to stop the P2P conections on my pix 515 and the N2H2 filtering
2) Also I set the privileges to diferent categories, like teachers have some access to install printers on their account, students have not privilegies to save on the my documents workstation or even on the C:\ drive ..etc..etc.. all students documents are saved on a file server, on their home folder, even teachers have this but in diferent drive.
3) Restrict IE/Netscape from "Save File As" of "Save Link" - so they can not download files.(I don't know how to do this on Win2k with Active Directory)
4) At the end of the school year - make it a policy that all files on the shared drive are deleted and not backed up. No Exceptions! (You should be there now) (This was done since I start using Active Directory)
Is there a policy example that can help me understand more about win2k and internet explorer capabilities that maybe I can implement on my HS?
Thanks again for repling, that was very good help.