Creating the Secure Managed Desktop: Using Group Policy, SoftGrid, Microsoft Deployment Toolkit, and Other Management Tools

Chapter 11. Full Lockdown with Windows SteadyState

All the deliverables we've put together thus far using Group Policy, the managed Desktop, and SoftGrid are awesome. Once they've been implemented your IT life won't ever be the same. You'll have more free time to "think the big thoughts" that made IT worth getting into in the first place.

But even with all that massaging using the technology we've put in place, there is still one missing piece. "How do I use Group Policy to put the full lockdown on a machine?" is a question I get a lot.

You learned how to do bits and pieces of this already:

• You can use mandatory profiles to prevent users from preserving their Desktop view.

• You can use Group Policy settings to control the way Windows Explorer ...