locking down a profile on windows 7

How can I lock down a profile via GP to basically only allow one program to be used.
For example, I want the programs/features, control panel, etc... removed
Also want the games, actually the entire all programs removed.
Also want to remove all browsers as well.

I just need to create a shortcut on the desktop that points to an exe on the local C drive that runs an application, besides that, I don't want the user to have any other access.

Is that possible, and how would I do that?

The account doesn't have to be pushed out via GP, but it needs to be an Active Directory account, so I have different individuals use the same account.



The easiest way is to specify a custom user interface for that user in Group Policy. You would set that interface to be the program that should be launched.

http://deployhappiness.com/group-policy-kiosk-mode-locking-down/



The easiest way is to specify a custom user interface for that user in Group Policy. You would set that interface to be the program that should be launched.

http://deployhappiness.com/group-policy-kiosk-mode-locking-down/



For what you are looking for you will need to create a GPO specifically for User Policies. From the User Configuration Policy you can lock down everything. See the screenshot below.



Which version of Windows 7? Enterprise or Ultimate can use Applocker
https://www.youtube.com/watch?v=gVySPtMcvmc
http://www.mahalo.com/how-to-use-the-app-locker-in-windows-7



So I have pretty much made the changes that I want, but how do I now install the program for this restricted user account and add the shortcut to the desktop, because I prohibited all access to create items on the desktop.



I am using windows 7 pro, on a domain

Share this

Related Posts

There was an error in this gadget