I have created a new domain with window server 2008. Before I join the Windows 7 computers to the domain, I want to know step by step how to "lock the computers down". The end users will be only able to use Microsoft Office, Internet, and a 3rd party application. That is all I want them to be able to do, period. Please give me details on how to accomplish this.