Lockdown laptop using GPO. Is there a template or something similar?

By sfeldman ·

I'm looking for a template, document, etc. which will help im my effort to lockdown laptops so users can only do things I want to allow, like configure wireless, etc. and disallow software installation, running programs, etc. Does such a docuement exist?

Currently, users are configued as part of the domain and in the administrators group on the laptops and I created a GPO which blocks access to certain control panel applets, allows them to only run specified windows applications, removed access to "run", etc. I'm not sure that is the correct way of doing things.


This conversation is currently closed to new comments.

Thread display: Collapse - | Expand +

All Answers

Collapse -


by sfeldman In reply to Link

I guess what I'm really asking is it correct to make the domain user part of the administrator's group and then use GPO to lock down or not have them as part of the administrator's group? Originally I made them just Users but they couldn't do things like access their wireless at home, etc.


Related Discussions

Related Forums