I was just wondering how you would severely lock down a desktop environment for maybe customer service operators so they can only run certain programs. But also let other staff that use the same computers to not be affected by these restrictions.
I was wondering how i would go about achieving this
I know i has something to do with groups, group policies (objects) and maybe an OU.
Thanks mate for your help