<div>
Hello Jsk<br />
<br />
There might be a contradiction in your request<br />
<br />
option 1 you want access to add/remove printer &quot;settings&quot;<br />
option 2 removes ALL sort of settings making 1. non valid<br />
unless of course you have a server printer page, that will pick up drivers from a Distribution point and will do this silently.I seen this often in hospital settings.. <br />
<br />
if I was you I would set a GPO for all printers that users could print to, &nbsp;then set another GPO to remove settings...<br />
<br />
option 3,, this is possible by setting a shortcut of your browser in the windows startup folder<br />
for bunch of Workstations then you would involve a script
</div>


<div>
Yes We have print server.<br />
the shortcut on the user's desktop &nbsp;will open up the Printers window to Add/delete printer <br />
We do not use Printers mapping by user groups as you suggested..
</div>


<div>
<div class="content wysiwyg-content">
I need a GPO that locks down Windows 7.<br />
User will only be able to see : <br />
The Desktop with Printers shortcut, so that they can add / delete printers<br />
on the Start button, the will only be able to see : Shutdow /Restart/Logoff<br />
I also want Internet explorer to open up when they login to the computer<br />
<br />
Which GPO settings and/or script that can achieve that ?<br />
<br />
Thanks
</div>
</div>


I need a GPO that locks down Windows 7.
User will only be able to see : 
The Desktop with Printers shortcut, so that they can add / delete printers
on the Start button, the will only be able to see : Shutdow /Restart/Logoff
I also want Internet explorer to open up when they login to the computer

Which GPO settings and/or script that can achieve that ?

Thanks

Windows Lockdown GPO

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

A scripting language is a programming language that supports scripts, programs written for a special run-time environment that automate the execution of tasks that could alternatively be executed one-by-one by a human operator. Scripting languages are often interpreted (rather than compiled). Primitives are usually the elementary tasks or API calls, and the language allows them to be combined into more complex programs. Environments that can be automated through scripting include software applications, web pages within a web browser, the shells of operating systems (OS), embedded systems, as well as numerous games. A scripting language can be viewed as a domain-specific language for a particular environment; in the case of scripting an application, this is also known as an extension language.

Scripting Languages

Windows Server 2008 and Windows Server 2008 R2, based on the Microsoft Vista codebase, is the last 32-bit server operating system released by Microsoft. It has a number of versions, including including Foundation, Standard, Enterprise, Datacenter, Web, HPC Server, Itanium and Storage; new features included server core installation and Hyper-V.

Windows Server 2008

The Microsoft Server topic includes all of the legacy versions of the operating system, including the Windows NT 3.1, NT 3.5, NT 4.0 and Windows 2000 and Windows Home Server versions.

Microsoft Server OS

This topic area includes legacy versions of Windows prior to Windows 2000: Windows 3/3.1, Windows 95 and Windows 98, plus any other Windows-related versions including Windows Mobile.