I assume that you have updated the ADM's of your GPO to the Windows XP SP2
templates...(needed for the Windows firewall stuff)
1. Do you mean the RDP service (terminal services), or Remote Assistance?
You can configure the terminal service state in the services section of
Security Settings. Remote Assistance settings are in Computer
Configuration\Administrative Templates\System\Remote Assistance.
2. Good question, I never did see that one. It's probably in there
somewhere, but if it isn't I would probably make a custom ADM that would
configure that. You just need to find where in the registry the setting is
held. It has to be an HKEY_USER setting.
3. Firewall - Computer Configuration\Administrative
Templates\Network\Network Connections\Windows Firewall