Use the system policy editor to create an NTCONFIG.POL file that will be read on login and disable any service you specified in the file to lock down the workstation. After you've created the POL files, you place them on your NT network's Primary Domain Controller. You must put them in your server's NETLOGON share, which is in the SYSTEM32REPLIMPORTSCRIPTS subdirectory.
If the files are named incorrectly or stored in the wrong area, workstations won't be able to find then when they log on. Use the link below for more information on this subject.
This was first published in August 2001