This would be good, except that not all the machines will be Windows XP. Some will be Windows 98; I don't believe 98 has the ability to set security policies like that. (If I could change the OS on these laptops, I wouldn't be using Windows at all...)