• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 433
  • Last Modified:

What is the best way to "lock down" a Windows 7 Pro machine?

Hello experts,

This is related to a previous question.

We are installing Win 7 Pro on our workstations and would like to know the best way to "lock-down" the computers, e.g., we want some users to have very few privileges and others more so.  Where would I access/customize these restrictions?

Are there any role-based policy templates available on the internet? For example, some folks need to have access to USB ports, CD-RW, changing screen resolution, others don't, etc.

2 Solutions
Set users up as local user on PC with restricted rights.

Then use Group Policy on Server for further lcok down of USB etc.

use group policy and administrative templates to lock down users based on AD OU Containters


you could also edit the Local Group Policy Editor (gpedit.msc) if it is a specific machine. GPO on server will set these options based upon OU.
jumptohighAuthor Commented:
Thank you for the help!
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: SSL Checker

Scans your site and returns information about your SSL implementation and certificate. Helpful for debugging and validating your SSL configuration.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now