This is related to a previous question.
We are installing Win 7 Pro on our workstations and would like to know the best way to "lock-down" the computers, e.g., we want some users to have very few privileges and others more so. Where would I access/customize these restrictions?
Are there any role-based policy templates available on the internet? For example, some folks need to have access to USB ports, CD-RW, changing screen resolution, others don't, etc.