Working in a school environment as you can imagine causes all sorts of probs. So ive come up with a few ways to resolve probs with icons and users getting in to run things that they shouldnt. You could try installing the poledit program that gives you basically a GUI for your registry and provides you with a sorts of customisations for your users. I would recommend setting only a handful of policies.
Once you have this on all your workstations then copy your config.pol file to your netlogon share. As our friend says you can use .adm templates that you can customise. I use a program called SMS from MS to restrict certain .exe and kixtart comes in very handy to customise or to write registry keys to your workstations.. Jacklothian has some very good solutions to this sort of thing and you will get some good pointers from him...
hope this helps.
Steve
_________________________
Dont worry because a rival imitates you. As long as they follow in your tracks they cant pass you!