Group Policy folder lockdown

[speckytecky]

Can someone point me in the direction of an answer to the following please:

 

I have recently taken on a bit of IT work in a special needs school. One thing I can see that needs urgent attention is student access to folders; they currently seem to have almost unlimited access and the school often has problems where malicious students have mved or deleted folders.

 

It's a Server 2003 environment; where do I go to lock down access so the little dears are restricted in activity. I pretty sure it is Group policy but this is an aspect I need to learn a lot more about.

[Gatt]

Its a combo of GP (software restriction Policy to restrict what they can open, and vairous GP settings for Desktop, Explorer, Start Menu's, etc) and using NTFS Security to only give them access to what they need!

[Geoff]

You can also use shadow copies to enable the 'previous versions' feature of network shares. This means you can easily restore missing files/folders rather than going to backup tapes.