what you do is create an OU (organizational unit) in active directory, put the student users/groups there. OUs can be managed from the group policy, providing all restrictions that you might ever need.
a good idea is to get GPMC from the MS site - it's a bit more usable than the standard GP control mmc
Moderator
Featured Poster
Reputation Points: 183
Solved Threads: 89
Posting Virtuoso
Offline 1,772 posts
since Jan 2007