I have a terminal server that is NOT part of a domain.
It is just setup on a simple LAN.
I would like to limit the desktop so that anyone who is not an
administrator can only double click the available icons.

They can not right click or change their desktop in any way.
The start button will not show all the installed programs.

I know this is possible because I have logged into a Terminal Server
that was configured this way one time in the past.

The question is how the hell do I do it?

I heard that some how an administrator locked himself out of the admin
account.  I don't want to do this in some inadvertant way.

Thank you in advance.

Greg Hill