Solved

What is the best way to "lock down" a Windows 7 Pro machine?

Posted on 2012-03-23
3
422 Views
Last Modified: 2012-04-03
Hello experts,

This is related to a previous question.

We are installing Win 7 Pro on our workstations and would like to know the best way to "lock-down" the computers, e.g., we want some users to have very few privileges and others more so.  Where would I access/customize these restrictions?

Are there any role-based policy templates available on the internet? For example, some folks need to have access to USB ports, CD-RW, changing screen resolution, others don't, etc.

Thanks,
Mike
0
Comment
Question by:jumptohigh
3 Comments
 
LVL 15

Accepted Solution

by:
jerseysam earned 250 total points
ID: 37756751
Set users up as local user on PC with restricted rights.

Then use Group Policy on Server for further lcok down of USB etc.
0
 
LVL 2

Assisted Solution

by:Kubejunkie
Kubejunkie earned 250 total points
ID: 37789142
http://technet.microsoft.com/en-us/library/cc736953(v=ws.10).aspx

use group policy and administrative templates to lock down users based on AD OU Containters

http://technet.microsoft.com/en-us/library/cc786677(v=ws.10).aspx

you could also edit the Local Group Policy Editor (gpedit.msc) if it is a specific machine. GPO on server will set these options based upon OU.
0
 

Author Closing Comment

by:jumptohigh
ID: 37802794
Thank you for the help!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Enable remote desktop on remote Windows 7 computer 3 132
URL to download Windows 10 Home 7 111
Hibernate on windows 10 18 118
Is My Bios Too Old For SSD Drive 10 100
Not many admins are aware that GPOs can be activated and deactivated time-based. Time to change that :)
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

919 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

19 Experts available now in Live!

Get 1:1 Help Now