I am trying to help out a friend (unpaid) with some basic
configuration settings on a Windows 2003 Server running terminal
services and rdp clients for about 10 people.  I am not very
familiar at all with this sort of thing, all my server
background is on UNIX/Linux, but I have more computer background
in general than he does and am very familiar with all the
Windows client OS platforms, so I'm doing what I can to help
him.

The main issue is he is trying to set up some applications
(installed as Administrator) that will show up on his desktop
and can be run by him (only).  However, whenever he does that,
all of the users can see them, not just him.  Similarly,
anything in his startup folder runs on all of the clients as
well.  This winds up with 10 copies of some things running that
do not need to be.  I am sure this has to be simple, but casual
investigation hasn't turned on the lightbulb for me.

One other issue is that Internet Explorer is being very picky
about web browsing, he claims as a result of some security patch
in the past.  It claims that "Internet Explorer enhanced
security configuration is enabled".  He doesn't want to restrict
them from being able to browse the web, or having to add every
specific URL they can access into a trusted zone, etc.  If he
turns it off, every time they start up a web browser they get a
"Caution:"  about it not being enabled, and it overrides their
home page settings.  How can we make this just go away?  

                  |___/