Creating very restrictive group policy for select users

[Guest mike]

Hi,

 

I'm trying to create a group policy that restricts all access on a domain

machine with the exception of a few key applications, and I'm having trouble

restricting access to the command shell (cmd.exe) as well as My Computer (to

prevent file browsing). I've managed to remove all the icons I want from the

Start Menu and network access is already limited as much as I want, but when

it comes to really 'locking down' the machine for a very specific use I can't

figure out where in group policy I need to make some changes. Does anyone

know of some good references to use in creating a group policy like this? Is

there an index out there that shows where in group policy you can find what

you're looking for (I wish group policy came with a search function!)? I

would appreciate any help. Thanks for your time.