O.K. - long story short - I have a small LAN that (when completed) will have 3 XP Pro computers on it. This LAN is also connected to the internet via a firewall/router & cable modem. The 3 systems will be in a common workgroup and I will create 1 Administrator Account & 1 General User Account (which will auto log-on) & *duplicate* them across all 3 systems (will probably also add a back door Admin account for myself too ). What I need from you folks who do this a lot more than I do - is information on how to lock down the computers to keep the end users from: Installing any new software Removing any software Changing any system settings (Desktop, Start Menu, IE Settings, etc.) I will have one partition open to these folks as we have college students who do homework on them, but other than that I also need to keep them away from system files/partition. Also 1 system will also be running various IM clients (as of yet to be determined but most likely AIM & Yahoo) so they will need the ability to create the various user accounts on that as well. I used to do this stuff years ago in the NT 4 days and I know that some of this is already done in 2K & XP simply by creating the account as a User instead of an Administrator, but I need to lock down further than that. Thanks in advance for your help.