Select this option if this is the first domain in your organisation of
if you want the new domain to be completely independent of your current
forest.
then follow the installer configuration.
Still inside your organizational unit, create a new user.
1) User Configuration > Administrative Templates > Windows Components > Windows Explorer
a) Remove Map Network Drive and Disconnect Network Drive
Prevents users from using Windows Explorer or My Network Places to map or disconnect network drives.
b) Hide these specified drives in My Computer (I enabled for C only)
Removes the icons representing selected hard drives from My Computer and
Windows Explorer. Also, the drive letters representing the selected
drives do not appear in the standard Open dialog box.
c) Prevent access to drives from My Computer
If you enable this setting, users can browse the directory structure of
the selected drives in My Computer or Windows Explorer, but they cannot
open folders and access the contents. Also, they cannot use the Run
dialog box or the Map Network Drive dialog box to view the directories
on these drives.
2) User Configuration > Administrative Templates > Windows Components > Internet Explorer
a) Disable changing home page settings
Prevents users from changing the home page of the browser. The home page
is the first page that appears when users start the browser.
3) User Configuration > Administrative Templates > Start Menu and Taskbar
a) Remove Search menu from Start Menu
Removes the Search item from the Start menu, and disables some Windows Explorer search elements.
b) Remove Help menu from Start Menu
Removes the Help command from the Start menu.
c) Remove Run menu from Start Menu
Allows you to remove the Run command from the Start menu, Internet Explorer, and Task Manager.
d) Lock the Taskbar
If you enable this setting, it prevents the user from moving or resizing the taskbar.
4) User Configuration > Administrative Templates > Control Panel
a) Prohibit access to the Control Panel
This setting prevents Control.exe, the program file for Control Panel,
from starting. As a result, users cannot start Control Panel or run any
Control Panel items.
5) User Configuration > Administrative Templates > Control Panel > Display
a) Prevent changing wallpaper
Prevents users from adding or changing the background design of the desktop.
6) User Configuration > Administrative Templates > System > Ctrl+Alt+Del Options
a) Remove Task Manager
Prevents users from starting Task Manager (Taskmgr.exe)
7) User Configuration > Administrative Templates > Control Panel > Desktop
a) Prohibit user from changing My Documents path
Prevents users from changing the path to the My Documents folder.
8) User Configuration > Administrative Templates > Control Panel > System
a) Prevent access to the command prompt
Disable the command prompt script processing also? No
Prevents users from running the interactive command prompt, Cmd.exe.
This setting also determines whether batch files (.cmd and .bat) can run
on the computer.
b) Prevent access to the registry editing tools
Disable regedit from running silently? Yes
Disables the Windows registry editor Regedit.exe.
Courtesy : http://potools.blogspot.in