lac.fi

Notes to self
› Group Policy: Settings for a restricted environment

User Configuration › Policies › Administrative Templates › Control Panel

Prohibit access to the Control Panel

User Configuration › Policies › Administrative Templates › Control Panel › Display

Prevent changing wallpaper

User Configuration › Policies › Administrative Templates › Control Panel › Programs

Hide "Set Program Access And Computer Defaults" page

User Configuration › Policies › Administrative Templates › Desktop

Hide and disable all items on the desktop

Prohibit User from manually redirecting Profile Folders

Remove the Desktop Cleanup Wizard

User Configuration › Policies › Administrative Templates › Start Menu and Taskbar

Clear history of recently opened documents on exit

Lock all taskbar settings

Remove access to the context menus for the taskbar

Remove Balloon Tips on Start Menu items

Remove Default Programs link from the Start menu.

Remove Games link from Start Menu

Remove Help menu from Start Menu

Remove Music icon from Start Menu

Remove Network Connections from Start Menu

Remove Pictures icon from Start Menu

Remove Recent Items menu from Start Menu

Remove Run menu from Start Menu

Remove Search link from Start Menu

Turn off notification area cleanup

Turn off personalized menus

User Configuration › Policies › Administrative Templates › System › Ctrl+Alt+Del Options

Remove Change Password

Remove Task Manager

User Configuration › Policies › Administrative Templates › System › Removable Storage Access

All Removable Storage classes: Deny all access

User Configuration › Policies › Administrative Templates › Windows Components › AutoPlay Policies

Turn off Autoplay

User Configuration › Policies › Administrative Templates › Windows Components › Internet Explorer

Disable AutoComplete for forms

Enforce Full Screen Mode

User Configuration › Policies › Administrative Templates › Windows Components › Internet Explorer › Internet Control Panel

Disable the Advanced page

Disable the Connections page

Disable the Content page

Disable the General page

Disable the Privacy page

Disable the Programs page

Disable the Security page

User Configuration › Policies › Administrative Templates › Windows Components › Windows Explorer

Do not display the Welcome Center at user logon

Prevent access to drives from My Computer: Restrict all drives

Turn off Windows+X hotkeys