I am interested in documentation and other resources that will describe procedures for restricting program access by user under windows 2003. The scenario is that we have performed a lockdown under group policy for the terminal server within a domain. Now we have created security groups that various groupings of users are then added as members. We want to permit or deny access to installed programs based on whether a particular user is a member of a particular security group. Version of active directory is windows 2003 enhanced and we are running terminal server 2003. Please advise and post to the list for all to view. Thanks. -Kevin Fjelsted