Lockdown laptop using GPO. Is there a template or something similar?

Hi,

I’m looking for a template, document, etc. which will help im my effort to lockdown laptops so users can only do things I want to allow, like configure wireless, etc. and disallow software installation, running programs, etc. Does such a docuement exist?

Currently, users are configued as part of the domain and in the administrators group on the laptops and I created a GPO which blocks access to certain control panel applets, allows them to only run specified windows applications, removed access to “run”, etc. I’m not sure that is the correct way of doing things.

Thanks