How can I setup a new Windows 2000 user so that the user is not allowed to run task manager & services applets?

[IsOs]

I need help from NT/Windows 2000 certified professional. Can someone give me a step by step instruction in setting a user with limited capabilities - like not being able to run the task manager & services applets in Windows 2000.

Do you guys know of a site that discusses and show these goodies?

 

[IsOs]

I absolutely want all the services, including DC projects not showing to a particular using but simply crunching.

I need help. Any Windows 2000 expert around?

 

[DarkMajiq]

I wish I had the know-how to help you, but I don't, so I'll just give a bump for a man in need

 

[Robor]

I don't know for sure but there may be something you can do with a Group Policy on the local machine. Type "mmc" in the run field, then go Console | Add/Remove Snap-in | Add | Group Policy. There's a ton of things you can limit a user from doing in there. I used it to lock down machines at work until the management changed their mind and had me remove the limits (which is always fun :| ). I don't remember anything to remove Task Manager or the Services Applet but it might be somewhere in there. If I can think of anything else I'll post it.

 

[Sukhoi]

I think I remember being on an NT system one time that was totally locked down..couldn't even get to anything after doing Ctrl-Alt-Del. No idea how they did it though.

 

[Fardringle]

Set them up as Guest accounts. Guests can't do much of anything..