Hi We have just got 20 Macs setup and added them each individually to our Active Directory server and they work really well. However, we really need some sort of deeper control over what user can access while on the Macs, I have heard a little that Lion Server or Remote Desktop might help, but I need better directing. What can I get which will relatively easily let me lock down applications etc on our Macs connected to Active Directory? Also if Lion Server is what might be needed or an option, does it need installing on every Mac? Or Just our master one? And, would mean having to rebind every computer? Thanks.