Creating A Local Profile For Users 

 Some people may be reluctant to give to many users administrative access to the server.  However, you may need to give some users access to run and configure programs which require this level of access. There is a solution the can provide users with the level of access they need, while at the same time restricting them to the other tools available to the administrator.  To provide this, you must create an local account on the server, and set up a profile for that account which has most access to the machine removed, but still has administrative privileges

1. Run “Administrative Tools” -> “User Manager For Domains.”

2. Select “User”

3. Select “New User” from the menu.

4.Create the user account. Click "Add"

5. Select “Groups”

6. Add to Local Administrators..

8.Log into server with the new account.

9. Select “Start Menu”->

“Administrative Tools”->

“System Policy Editor”.

10. Click on “File” then select “Open Registry”.

11. Select the settings you want under “Local User “ then save.

12.  Delete any desktop icons you don’t want. Add the MysaNiTy shortcut to the desktop.

* you can experiment with the settings, by changing a few at a time, then logging on and off as different users, until you are comfortable with a particular set.