New to AD: Suggestions for Comp Lab

[kcalderw]

I want to create a small lab of 4 PCs. I just launched AD here at the school and want to start setting up GPOs. The majority of our machines are Macs that while connect to AD (for user authentication) are not managed via AD. Can anyonen suggest good lab settings for elementary (primary) school?

 

I'd like to:

-disable right-click on desktop

-lock out start menu

-only allow them to launch programs on the desktop

-restrict USB drives

-restrict any access to install software

[Callum]

Look into using mandatory profiles in order to provide the users with a 'templated' user, and just generally explore all of the group policy settings that are available, they're all very self-explanatory and very easy to manage.