I have a Win 2003 R2 server that users log in using Terminal Services. This server is not a domain controller and does not have active directory installed. What is the easiest way to lock down none admin users on terminal server? I want to disable IE, Program installs, desktop changes, and basically only want to allow for one program to be opened and ran.
thanks