I think I've read about 100 articles on Windows 7 and mandatory profiles and group policy. :-( I can do this with Windows XP all day long. Create a profile, copy it to a share and make it a .man file, preventing user changes. Create a GPO that removes all the Start Menu items and everything else pretty much. Put my shortcuts in the shared profile and use ADUC to enter a Profile path to give all the users I put in the Restricted GPO that specific profile that they cannot change. XP does this well, and with no complaints.
Windows 7 - well, it turns into a disaster and either one part works or another, but never all of it. Does anybody have a reall world example of doing this? We have a locked down location that can only run what we put in their Start Menu and want that to be all they see. It's a Windows 2008 R2 domain controller environment, and there doesn't appear to be any Windows 7 policy templates to make this simple. XP was a bit of work, but easily reproducible...not so with Win7 it appears.
Help would be hugely appreciated.