You can definitely do this with GPO. You could even try to change the shell from Explorer to Outlook, which would prevent any access to the Explorer. I haven't tried this with Outlook but have done it successsfully with IE for web kiosks. You might want to check out the GPO scenarios that MS provides at http://www.microsoft.com/technet/prodtechnol/windowsserver2003/technolog ies/management/csws2003.mspx
The scenarios are a set of GPO settings for various levels of lockdown and have some good guidelines for doing kiosk type machines. Darren -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Creamer, Mark Sent: Friday, May 28, 2004 12:01 PM To: [EMAIL PROTECTED] Subject: RE: [ActiveDir] wierd request You could probably set the machine up like a kiosk with lots of GPO lockdown policies - personally I'd get one of those rdp thin clients and have it connect to a terminal server - setting the session to run the application (eg Outlook) only, rather than showing the desktop <mc> -----Original Message----- From: Kern, Tom [mailto:[EMAIL PROTECTED] Sent: Friday, May 28, 2004 2:48 PM To: ActiveDir (E-mail) Subject: [ActiveDir] wierd request my manager just came to me and asked if there is a way to prevent a user from doing anything but email on the network or from a specific pc? we use exchange2k with win2k ad. is ther a way to do this via a local gpo or put them into an ou and apply a gpo that way? very strange thanks List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
