Locking down a xp machine on 2000 domain

[silvere]

I need to lock down a xp pro machine, which is on my 2k domain. I want the person to be able to have access to some mapped drives, cd, floppy, and certain programs. I do not want him to be able to access the internet or install/remove programs. however, I need to be able to log in as admin and be able to access the net, ect...

can anyone shed some light?

thanks!

Antec SLK3700AMB
2 mobile 2400+ @2.0ghz
MSI K7D Master
1GB Samsung Registered ECC PC2700
Highpoint RocketRaid 1640
1 74GB Raptor
2 Maxtor SATA 7200 80 GB 8mb cache Hard Drives @ raid 0
ATI FireGL 8800 - Dual Monitors
Lite-on DVD RW+- 8x SOHW-812S
Sony DVD-Rom DDU1612
Lite-on 52x24x52

 

[Serbtastic]

Sounds like a job for Group Policy:

http://www.microsoft.com/windows2000/techinfo/howitworks/management/grouppolwp.asp