We will install 3 PC's and at the reception area, these 3 PC's will be just for internet browsing not more, I want you to help me with a set of local group ploicy settings helping me in proctecting them, the policy should satisfy the following:
1- the user cannot install any software espectially those not needing administrator rights
2- the user cannot browse the start menue.
3- Internet Explorer always on and cannot be closed (explorer running automatically at start-up).
4- the user cannot use mail programs like Outlook Express.
5- user cannot open cotrol panel or control.exe or cmd.exe
6- the user cannot modify the internet explorer security settings.
7- any other adviced security settings ( like want windows components should be installed and what services to be running and which is unecessary)
8- blocking adults sites and chatting software or music sites
9- the user cannot download any file into hard disk
10- user cannot use the CD-ROM only administrator can
notting these settings should be applied for the user account not the administrator account and the computers not joined to any domain.
Please help me with the set of group policy settings, scripts and other softwares.