i got some folks that rdc into a box only for running one app. i want these folks to have access to the app’s shortcut on the desktop, and logoff on the start menu. period. sure, i can go through the entire gpo enabling and disabling items one at a time. but, is there an easy way to lock everything, then add what i want? like, where’s the ‘lock down’ button?