if you look at a GP editor, "run GPEDIT.msc" to see the local version, it's pretty easy to get the hang of it. for what you want to do, just set the user config, under administrative templates, Control Panel, display, and then then choose the option you want to enforce. to do the same in AD isn't that mych different, you just have to understand how the policy's get applyed. User configurations can only be applyed to users and the same for computer policy, so you have to apply the settings to the OU's of users\computers...
if you have specifics, ask away. I work better with that kind of stuff rather than generic questions...
if you have specifics, ask away. I work better with that kind of stuff rather than generic questions...