Avishay, Check out www.respowerfuse.com it will lock down any (nt) windows based environment. nothing is allowed unless access has been granted, very easy to configure and maintain. The function you are looking for in RES PowerFuse is AppGuard. You can download a demo from the site. Best regards, Guido -----Original Message----- From: Avishay Harary [mailto:avishayh@xxxxxxxxxx] Sent: 06 August 2003 11:08 To: thin@xxxxxxxxxxxxx Subject: [THIN] Lock some functions on some servers Hi you all, I have few Terminal servers in my organization. Some users connect to them throw thin clients and some throw their laptops or desktops with ICA or RDP protocol. I want to prevent all users from performing some functions on the terminal servers when they open a session, and to be able to perform those actions when they are working on their own computers. for example: to enter add / remove programs. I want to disable this on the Terminal Server and to allow the desktop users to enter it on their computers. to add a printer, to install application from the Internet (there are some applications that do not need to go through the add remove programs even on terminal server) and so on. Please, any suggestions? thanks, Avishay