<< my manager just came to me and asked if there is a way to prevent a user from doing anything but email on the network or from a specific pc?
we use exchange2k with win2k ad. is ther a way to do this via a local gpo or put them into an ou and apply a gpo that way? >> In situations similar, I've recommended locking the machine to only allow access to the browser which connects to Exchange via Outlook Web Access. FYI, this is how the machines in the lobbies of the Microsoft buildings in Redmond are configured. You can go two routes with those machines - TS to your desktop, or OWA to your mailbox. Of course, you have to insert your smart card to get started and provide your password. Charles Oppermann, [EMAIL PROTECTED], http://weblogs.asp.net/chuckop/ List info : http://www.activedir.org/mail_list.htm List FAQ : http://www.activedir.org/list_faq.htm List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
