MonitorWare Knowledge Base

Setting up and Internet Cafe, running Windows Server 2003 and Windows XP Pro on Clients. I have created an OU and created some GPOs restricting the clients, working fine. But I've got some questions about some restrictions I cannot setup:

1.)
On the Clients, I cannot remove toolbar buttons on Windows Explorer such as "Delete" "Copy To" "Undo" and so on. The only thing i can do so far is to customize the toolbar and toolbar buttons, and then Edit the GPO at User Configuration > Administrator Templates > Windows Components > Internet Explorer > Toolbars ... and Enable the first 2 Settings there. The result is just a return of the toolbar buttons I had previously removed. (The "Configure Toolbar Buttons" setting at the same screen does not have any check boxes for Windows Explorer, but Only for Internet Explorer. Haven't seen any similar settings in User Configuration > Administrator Templates > Windows Components > Windows Explorer). So the result is a restricted client pc with "Delete" "Copy To" "Undo" and so on, in the "My Documents" window or any other kind of Windows Explorer window.

2.)
I have setup the Client's start menu shortcuts to run from server. Also restricted the client's start menus so they only have the custom menus I created, the ones that run from server and look like this:

Games
Internet
Media
----------------
Programs
Documents
----------------
Shut Down

But when the end user double clicks on any of the "Games", "Internet" or "Media" shortcut folders, is able to get the folder tree on a NEW Windows Explorer window. My question is, is there any way to prevent the user from being able to open windows explorer by double clicking on a shortcut folder ?

3.)
Is the any possible way to restore the Language Bar on a client pc for other user account except Administrator's account ? So far I cannot restore it in case I close it from taskbar on all accounts except Administrator. If I go to Control Panel > Regional and Language Options > languages Tab > Details (client pc), the Language Bar under Preferences is gray (cannot click). I have also tried to create a fix.reg file and run it but still nothing.

4.)
How can I prevent a restricted user's account from being able to access the SYSVOL ? If I deny access to it that is wrong and can cause many problems. What if I share the SYSVOL as SYSVOL$ ? What do you suggest ? Another bad thing is if the user does CTRL + E

thanks in advance