This is a big question & a lot to dump on this board. Below is a start. (All our clients are Win95) There are other issues as well but I can only put so much here. You also have to lock down the msdos.sys file & force logon to an NT domain. Also you need some type of backdoor through the security (We have used HiddenOptions & Security Wizard 97 both work well. Both have passwords which most free security apps lack.) Good luck.Here is the basic kixtart file for students.
*****************************************
;StdtPol.kix Set Screen Saver for Students
;Update History - 23/01/00 Jack Lothian
$SS1 = WriteProfileString("c:\Windows\control.ini", "Screen Saver.Marquee",
"Text", "Welcome to Hadley Lab")
$SS1 = WriteProfileString("c:\Windows\control.ini", "Screen Saver.Marquee",
"BackgroundColor", "0 0 0")
$SS1 = WriteProfileString("c:\Windows\control.ini", "Screen Saver.Marquee",
"TextColor", "255 0 0")
WriteValue("HKEY_USERS\.Default\Control Panel\desktop","Wallpaper","C:\WINDOWS\hadhawk.bmp","REG_SZ")
WriteValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{FBF23B42-E3F0-101B-8488-00AA003E56F8}","@","The Internet","REG_SZ")
WriteValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{20D04FE0-3AEA-1069-A2D8-08002B30309D}","","My Computer","REG_SZ")
WriteValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{208D2C60-3AEA-1069-A2D7-08002B30309D}","","Network Neighborhood","REG_SZ")
WriteValue("HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{00020D75-0000-0000-C000-000000000046}","","Inbox","REG_SZ")
shell "c:\windows\security\regedit.exe /s l:\regfiles\std_restrict.reg"
shell "c:\windows\security\regedit.exe /s l:\regfiles\Progr_rst.reg"
********************************
Here is our basic student reg file.
**********************************
REGEDIT4
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"ClearRecentDocsOnExit"=dword:00000001
"NoSaveSettings"=dword:00000001
"NoDeletePrinter"=dword:00000001
"NoAddPrinter"=dword:00000001
"NoRun"=dword:00000001
"NoFind"=dword:00000001
"NoNetHood"=dword:00000001
"NoSaveSettings"=dword:00000001
"NoPrinterTabs"=dword:00000001
"NoSetFolders"=dword:00000001
"NoSetTaskbar"=dword:00000001
"NoDrives"=dword:03EFFFBF
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Network]
"NoEntireNetwork"=dword:00000001
"NoWorkgroupContents"=dword:00000001
"NoNetSetup"=dword:00000001
"NoNetSetupIDPage"=dword:00000001
"NoNetSetupSecurityPage"=dword:00000001
"DisablePwdCaching"=dword:00000001
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\System]
"NoSecCPL"=dword:00000001
"NoAdminPage"=dword:00000001
"NoPwdPage"=dword:00000001
"NoDispCPL"=dword:00000001
"NoDispSettingsPage"=dword:00000001
"NoDispScrSavPage"=dword:00000001
"NoDispAppearancePage"=dword:00000001
"NoDispBackgroundPage"=dword:00000001
"NoProfilePage"=dword:00000001
"NoDevMgrPage"=dword:00000001
"NoConfigPage"=dword:00000001
"NoFileSysPage"=dword:00000001
"NoVirtMemPage"=dword:00000001
"DisableRegistryTools"=dword:00000001
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\WinOldApp]
"Disabled"=dword:00000001
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"DisableF3"="C:\\Windows\\KillF3.exe"
"DisableWinKey"="C:\\Windows\\WKeyKill.exe"
****************************
Here is how you limit the apps run. Very - Very important.
***************************************
REGEDIT4
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"RestrictRun"=dword:00000001
[HKEY_USERS\.Default\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
"0"="Secwiz97.exe"
"1"="HiddenOptions.exe"
"2"="Spook.Exe"
"3"="Pwone.exe"
"4"="Kix32.exe"
"5"="Winpopup.exe"
"6"="Winchat.exe"
"7"="RealPopup.exe"
"8"="Iexplore.exe"
"9"="Calc.exe"
"10"="Notepad.exe"
"11"="Mspaint.exe"
"12"="Wordpad.exe"
"13"="Famtreas.exe"
"14"="Treasfam.exe"
"15"="Altrtype.exe"
"16"="Vip95.exe"
"17"="Psdwin.exe"
"18"="Ccan.exe"
"19"="qpw.exe"
"20"="wpwin.exe"
"21"="wpwin61.exe"
"22"="HTML Constellation.exe"
"23"="Exchng32.exe"
"24"="Mlset32.exe"
"25"="Golf.exe"
"26"="Sol.exe"
"27"="Freecell.exe"
"28"="Mshearts.exe"
"29"="Cruel.exe"
"30"="Compte.exe"
"31"="Fingam.exe"
"32"="Rhubarb.exe"
"33"="Lifegen.exe"
"34"="Cyrus.com"
"35"="Pegged.exe"
"36"="Pipe.exe"
"37"="Rattler.exe"
"38"="Rodent.exe"
"39"="Ski.exe"
"40"="Stones.exe"
"41"="Tetris.exe"
"42"="Tic.exe"
"43"="Tp.exe"
"44"="Tripeaks.exe"
"45"="Tutstomb.exe"
"46"="Wordzap.exe"
"47"="hangman.exe"
"48"="Crib.exe"
"49"="Checkers.exe"
"50"="Logoff Computer.exe"
"51"="Reboot.exe"
"52"="PWShut.exe"
"53"="PCRdist.exe"
"54"="Pcrdist.exe"
"55"="Explorer.exe"
"56"="MkReg1.bat"
"57"="RegComp.bat"
"58"="StartUp.exe"
"59"="Cleaner.exe"
"60"="Clnsys.exe"
"61"="more.exe"
"62"="quickclean.exe"
"63"="QuickTray.exe"
"64"="RegDump.exe"
"65"="RegClean.exe"
"66"="TempClean.exe"
"67"="Winzip32.exe"
