I just did a hack for one of my customers to stop one problem employee surfing on Facebook all day. While I'm no fan of blanket barring of web access, in this instance we needed some simple, short-term measures that didn't warrant any real expenditure...
I have a few sites that are now totally Windows Vista Business and SBS 2003 where the users run as Standard User. One consequence of this is that printers have to be deployed by group policy, because standard users don't have permission to install...
I recently had a problem with a customer running all Windows Vista clients on an SBS 2003 R2 domain. The problem was how to deploy printers to users who have restricted access (i.e. standard users). The users cannot install the printer drivers themselves...
The block_vml.vbs script that is available from http://isatools.org/block_vml.vbs , documented by Microsoft and discussed on EBitz has a bug that means it doesn't run correctly on SBS servers. At least, on my server (running SBS 2003 R2 with ISA 2004...