I need to lock down server win2k machines. The user needs to access just a few programs. I have tried to set them to just a "User" under groups. but 1 of the programs they need has to read/write to the registry. So I am forced to make them "Power Users". How can I lock this down more??