How do I keep other users from creating or getting into GP?

I have been given the task to create a policy that will either log off the
user or lock the machine after it sits idle for a certain period of time.  I
hvae found where to set this for a server, but have been unsucessful finding
this for a workstation.  Please Help

I've run DCDiag /s:server /e to health check all of the AD servers in the
enterprise. The 'ObjectsReplicated' test reports:
"Failed to read object metadata on <SERVER>, error The parameter is
incorrect."

I have a parent/child domain both running w2k3.  I have another w2k server
that I would like to join this tree as a child domain.  From my reading, I
don't have to run forest/prep or domain/prep on the w2k server.  It can
coincide in the tree as a downlevel domain because it is a ...

I have a domain abc.com, running a Win2k AD services. I need to import
selective users like 2000 users from abc.com Win2k AD to xyc.com running Win
2003 AD services.
Any idea how I can accomplish the task?

I have to migrate or clone or copy the AD from a forest (W2003 on mixed
mode) to another forest (W2003 on mixed mode too). The new DCRoot will have
to replace the first. The problem is I think I cannot use ADMT (it needs the
target domain in native mode) neither the SIDHistory ...

I have a DC for forestA in the head office and also DC for forestB in the
remote. They both trust each other. If a client belongs to forestA login in
remotely, should the DC in forestB provides authentication? or will forward
the request to DC in forestA?

Does anyone have an idea why I am getting this error??
C:\WINDOWS\ADAM>ADAMSync /install computer_name:50000
c:\Windows\ADAM\conf_public.xml
Please enter password: 12345

Is it 'bad' practice to run IIS on server that is a Domain Controller?

testing scenario in my home domain I have domain name as DOMAIN before
trying this at work
Domain Controller is named Harper.domain
2nd server is named dataserver2.domain

I'm new to group policy.  Can I use group policy to make an enterprise
change to a setting within Microsoft Office even though I did not use Group
Policy to deploy it initially?  Also, are there any recommended websites to
learn more about Group Policy?

I'm trying to find out if there is a way that I can set up a printer (network
printer) as the default printer through a group policy object, or if I have
to find a script that does that and run it when the user logs in to to the
network.  I'm trying to avoid making the user go ...

I have a server that has a problem with Windows Product Activation out of
the blue, and we cannot login to the console.  Microsoft cannot figure out
how to solve the problem, so I need to demote the server and install a
different one.

Is it possible to give a new user the exact same environment as the user they
replaced.  The new user will be on the same computer and need the exact same
environment.  I tried to do this by changing the user name but that would
change the SID.

   Can we develop java/jsp applications without the typical login page i.e.
it allows the user to access the java web applications based on the his
login information provided earlier at the windows login prompt ? Can I have
some url links on this ?