This is a thought out in the wild...Did you set up GPO's - restricting things like task manager, and put the server in the group that uses the GPO?
__________________
"Four freedoms: The first is freedom of speech and expression - everywhere in the world. The second is freedom of everyone to worship God in his own way, everywhere in the world. The third is freedom from want . . . everywhere in the world. The fourth is freedom from fear . . . anywhere in the world."
--Franklin D. Roosevelt U.S. President