What is the best way to "lock down" a Windows 7 Pro machine?

Hello experts,

This is related to a previous question.

We are installing Win 7 Pro on our workstations and would like to know the best way to "lock-down" the computers, e.g., we want some users to have very few privileges and others more so.  Where would I access/customize these restrictions?

Are there any role-based policy templates available on the internet? For example, some folks need to have access to USB ports, CD-RW, changing screen resolution, others don't, etc.

Thanks,
Mike
jumptohighAsked:
Who is Participating?
 
jerseysamConnect With a Mentor Commented:
Set users up as local user on PC with restricted rights.

Then use Group Policy on Server for further lcok down of USB etc.
0
 
KubejunkieConnect With a Mentor Commented:
http://technet.microsoft.com/en-us/library/cc736953(v=ws.10).aspx

use group policy and administrative templates to lock down users based on AD OU Containters

http://technet.microsoft.com/en-us/library/cc786677(v=ws.10).aspx

you could also edit the Local Group Policy Editor (gpedit.msc) if it is a specific machine. GPO on server will set these options based upon OU.
0
 
jumptohighAuthor Commented:
Thank you for the help!
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.