Binding AD to OD but only for certain users.

Question

We have a small (winXP) computerlab in an educational facility. In order to ensure that the computers are locked down they are all part of a Domain managed by a Win2003 AD server. I have done quite a few Registry Hacks to the Hive to make sure the users can't install software, or even see any drive's except, floppies, optical drives and zips. Our main service here is e-mail, and we are running an X-serve with all of the users in OpenLDAP (OD). We have quite a few users that we either don't need to be in our LDAP directory, or for security reasons shouldn't be, simply because they take a class for a semester and we never see them again. Some might say, well then just create a general account that the "outside" users can use and be done with it. The problem with that is, then all of the "outside" users see or can access the same "Home" drive. I suppose this wouldn't be a problem as long as they were notified that they could be giving access to their files to other users unless they used another storage mechanism (thumb drive, cd, outside FTP, etc.)
I was also curious what people's experience with using a hacked ntuser.dat to lockdown xp boxes was. I know it's possible, since that seems to be functionality built in. Also if anyone has had problems with multiple users using the same exact ntuser.dat file.

Answer 1

I figured it out on my own. I'd forgotten that my mother changed the account email addy, and I was changing it to the current one, which did nothing, as the songs were purchased on a second accout. Thanks anyway to anyone who considered rplying =)