Solved

What is the best way to "lock down" a Windows 7 Pro machine?

Posted on 2012-03-23
3
421 Views
Last Modified: 2012-04-03
Hello experts,

This is related to a previous question.

We are installing Win 7 Pro on our workstations and would like to know the best way to "lock-down" the computers, e.g., we want some users to have very few privileges and others more so.  Where would I access/customize these restrictions?

Are there any role-based policy templates available on the internet? For example, some folks need to have access to USB ports, CD-RW, changing screen resolution, others don't, etc.

Thanks,
Mike
0
Comment
Question by:jumptohigh
3 Comments
 
LVL 15

Accepted Solution

by:
jerseysam earned 250 total points
Comment Utility
Set users up as local user on PC with restricted rights.

Then use Group Policy on Server for further lcok down of USB etc.
0
 
LVL 2

Assisted Solution

by:Kubejunkie
Kubejunkie earned 250 total points
Comment Utility
http://technet.microsoft.com/en-us/library/cc736953(v=ws.10).aspx

use group policy and administrative templates to lock down users based on AD OU Containters

http://technet.microsoft.com/en-us/library/cc786677(v=ws.10).aspx

you could also edit the Local Group Policy Editor (gpedit.msc) if it is a specific machine. GPO on server will set these options based upon OU.
0
 

Author Closing Comment

by:jumptohigh
Comment Utility
Thank you for the help!
0

Featured Post

Highfive + Dolby Voice = No More Audio Complaints!

Poor audio quality is one of the top reasons people don’t use video conferencing. Get the crispest, clearest audio powered by Dolby Voice in every meeting. Highfive and Dolby Voice deliver the best video conferencing and audio experience for every meeting and every room.

Join & Write a Comment

Suggested Solutions

Are you one of those front-line IT Service Desk staff fielding calls, replying to emails, all-the-while working to resolve end-user technological nightmares? I am! That's why I have put together this brief overview of tools and techniques I use in o…
Ever wondered why Windows 8 and 10 don't seem to accept your GPO-based software deployment while Windows 7 does? Read on.
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

762 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now