I have a customer who we are speaking to about using Citrix/Terminal Services.
They use SAMBA as their domain controller (please excuse my total lack of knowledge of anything Linux).
Basically whenever we do a Citrix install to a full MS Windows site, we use group policy editor to apply desktop restrictions to users when they connect to the Citrix Server. This stops them from messing with the control panel, being able to shutdown etc.
The problem here is that they do not have an AD domain, so we cannot do this and I don't know enough about SAMBA to know what the best way of doing this is.
Someone here suggested using Poledit.exe (Windows Policy Editor), but this is a Win 9x/NT tool and I don't know if it's advisable to use it on a W2K3 server?