Protecting WindowsXP Pro

Does anyone know how I prevent the user "Student" from adding/removing programs, altering the registry and other system files, and deleting files on the hard drive?

or is there a way to have the machine go back to a standard configuration after each boot?

-Kev

 

In a workgroup enviornment, put the student account into the local users & groups, into groups and add it to the User group. Remove it from any others.

If you are running a domain, make the account a domain user as well.

Users have very limited rights to change anything other than their own personal files on XP-pro. They can't even run a defrag.

If you are in a classroom setting of some sort and need to allow the user to do things, get something like Norton's Ghost, make a "ghost" of your standard load on CD, and then you can revert the PC by using that to reload the PC. Quick and easy.