I usually use the local security policy for that kind of stuff, although this requires a professional version of Windows. Click Start, Run, and type mmc. Then click File, Add/Remove Snapins (or something like that) and click Add. Choose "Local Security Policy" (XP) or Group Policy Editor (for Vista) and choose Local Computer. Click OK until you are back to the console. Expand Computer Configuration and basically go through the options and enable and disable stuff as you see fit for your scenario.