yep, possible ways GPO, NTpolicy, reg-hack.
for AD and no need to support older than w2k, they recommend GPO.
otherwise it's script.
_________________________
!

download KiXnet