To continue reading for free, register below or login
To read more you must become a member of SearchWindowsServer.com
');
// -->

Restricting any user behavior is going to be very difficult if your users are logging in as full administrators rather than limited users, regardless of whether you're using local policies or AD-applied Group Policy permissions. The first thing you can and should do is created limited-user accounts for them, which will prevent them from installing other software (like Firefox). That should prevent them from making changes to the system.
(If you want to use Firefox but want to lock down the settings, look into the recommendations in the Institutional Deployment article in the Mozilla Wiki.)
Unless you leverage the technologies that exist in Windows to make these things possible, you're going to be playing an endless game of catch-up with your users.
|