Solved

What is the best way to "lock down" a Windows 7 Pro machine?

Posted on 2012-03-23
3
423 Views
Last Modified: 2012-04-03
Hello experts,

This is related to a previous question.

We are installing Win 7 Pro on our workstations and would like to know the best way to "lock-down" the computers, e.g., we want some users to have very few privileges and others more so.  Where would I access/customize these restrictions?

Are there any role-based policy templates available on the internet? For example, some folks need to have access to USB ports, CD-RW, changing screen resolution, others don't, etc.

Thanks,
Mike
0
Comment
Question by:jumptohigh
3 Comments
 
LVL 15

Accepted Solution

by:
jerseysam earned 250 total points
ID: 37756751
Set users up as local user on PC with restricted rights.

Then use Group Policy on Server for further lcok down of USB etc.
0
 
LVL 2

Assisted Solution

by:Kubejunkie
Kubejunkie earned 250 total points
ID: 37789142
http://technet.microsoft.com/en-us/library/cc736953(v=ws.10).aspx

use group policy and administrative templates to lock down users based on AD OU Containters

http://technet.microsoft.com/en-us/library/cc786677(v=ws.10).aspx

you could also edit the Local Group Policy Editor (gpedit.msc) if it is a specific machine. GPO on server will set these options based upon OU.
0
 

Author Closing Comment

by:jumptohigh
ID: 37802794
Thank you for the help!
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
COM Port 37 84
HP w1907 Monitor intermittent picture 4 52
Re-installed Windows 7 need to install second hard drive 2 62
How to complete an 'Apply Security' to a drive 25 108
Our Group Policy work started with Small Business Server in 2000. Microsoft gave us an excellent OU and GPO model in subsequent SBS editions that utilized WMI filters, OU linking, and VBS scripts. These are some of experiences plus our spending a lo…
Email signature management is something that is often overlooked in many organizations or is simply not implemented effectively. Let's take a look at what methods are available for managing this important piece of corporate branding.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

831 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question