I want to set up a Kiosk-like machine for a library workstation. How could i set up a domain user that has absolutley no rights to do anything on the computer. Im going to have a shortcut linked to a program on the network elsewhere execute upon login, but i don't want them to be able to do anything else while its logged in. not even logoff if i could. no writing to drives, no nothing. i tried using steadystate but i think its local users only.