win server 03, deny control panel access

I went to a job interview yesterday. One of the questions was roughly "how do you deny access to control panel for users with Active Directory?"

I've spent the day putting round the internet trying to find an answer (as it'll probably eventually come up for my current job as well).

Can anyone give me answer? Also, is it possible to set the various "performance" tweaks (e.g. turn off animate window min/maxing) from the server instead of at each individual machine per user? Win 2003 server, with Win XP terminals etc.

Thanks for any answers.

Group Policys. Basicially, they set registry keys among the Computers and Users in the OUs you link a Group Policy in your AD with. There are hundreads of pre-configured GP Objects you can configure globally with GPOs like the ones you mentioned. You can also set a Group Policy locally on each machine for this client and the Users. See gpedit.msc microsoft.com and http://en.wikipedia.org/wiki/Group_Policy_Object

Thanks alot. I think I must of been about half way to the answer, but all the objects just looked a bit confusing (I'd managed to find how for doing it locally).

http://www.steamwin.org/index.php?num=4187