I have a user on my network that I want to only allow access to certain network shares/programs.I basically want to lock down this user so that they can only access the programs that they use for work. The problem is that the programs that they use are on a network server. I want to make sure that they can access this specific shared drive but limit access to other shared drives and programs.What is the easiest way to go about this. They are currently set up in A.D.U.C. under domain users. I need to restrict access locally (on each PC) and restrict access in the terminal services session. (They currently are using citrix to gain access to network shares)Any help would be greatly appreciated. Thank You.

Create a group structure with this best practice: http://en.wikipedia.org/wiki/AGDLP Article explaining NTFS and share permissions on XP (Will work on Server 2003 as well): http://articles.techrepublic.com.com/5100-10878_11-6152061.html

also you may need to set up and configure Software Restriction Policies in your environment.[http://www.sysadmins.lv] As always enjoy the automation of tools within the Windows-based, .NET aware, WPF accessible, multi-processes on the same IP / Port usage, admin's automation tool, powershell.exe! Flowering Weeds