I am going to start deploying thin client out to some of my warehouse workers and am looking for a good way to lock down the server that theses users will be loggin on to. I am having them log into the full desktop instead of just publishing specific applications. I already have the security for these users to not be ablt to shut the server down or install applications, but would like to have them all have the same program groups listed under the start menu. Would this be something for a Group Policy? Thanks in advance for your input.