Group Policy: Fundamentals, Security, and the Managed Desktop

Chapter 15. Full Lockdown with Windows SteadyState

All the deliverables we've put together thus far using Group Policy and the managed Desktop are awesome. Once they've been implemented, your IT life won't ever be the same. You'll have more free time to "think the big thoughts" that made IT worth getting into in the first place.

But even with all that massaging using the technology we've put in place, one piece is still missing. "How do I use Group Policy to put the full lockdown on a machine?" is a question I hear a lot.

You learned how to do bits and pieces of this already:

• You can use mandatory profiles to prevent users from modifying their Desktop view.

• You can use Group Policy settings to control the way Windows Explorer behaves.

• You can use custom ...