Have a domain (local in office with up to 70 or so users) with a Win2003 Server as the domain controller and application Server. Would like to alter the default domain login for the users to prevent them from playing games, changing desktop backgrounds, changing power settings, changing screen saver settings, and adding or removing programs on their local machines. Is there an easy way to do that? Or do I have to go into each and every computer and do all the above individually on each? Most of the computers in the office are WinXP, however there are still a couple of Win98 and Win2000Pro computers on the network. Please help?!?!?!?!? My boss wants to me to manage the users ability to “not entertain themselves” via the system. Each computer’s administrator user has a password unshared with the users so they are unable to go in and change the computer settings, however the above items are still under the control of the local machine user.