I'm not sure whether it is possible to do this on a standalone pc, but on an active directory it's easy to lock a user account into a fixed state. they call it a mandatory profile. I've used it at a local community centre and it seems to work pretty good. may e it os possible to use mandatory profiles on a standalone windows box?