Hello all, Well I started working for this company and we are running alot of XP boxes on a Novell network. The previous admin setup this computers and setup the users part of the local admin group on each pc, so they pretty much have the run of there computers. What we want to do it start restricting them from changing there desktop and from them seeing the control panel, ect...... Since we are not on a Windows network how can this be done through a group policy? Do I need to configure each and every computer? And also since the local users are part of the local admin group do I need to remove them from that group and make them part of the local users group? If so will this cause problems with there exsiting programs and stuff? Thanks, Jay