Laptops, how do you lock yours down?
As an old thing before my time here people have always had completely unrestricted access to their staff laptops, they can plonk as many games and trojans on there as they wish but i think it's time to change all that!
To be honest it should have changed long ago but it's always been left for last as it's going to no doubt be a power struggle trying to pull those rights away from staff, but i have seen AOL, limewire, norton security **** and kids games enough times now that i want to chuck the things out the window.
Now i don't even know where to begin here, we're using windows 7 on all our new laptops and due to the fact we've never used offline files we've been giving people the local administrator account on them (stupid as that sounds, i know i know) to save them having to type "PCNAME\ACCOUNTNAME" which is one of very few number of things that annoys me with windows 7.
90% of staff are on mandatory profiles with EVERYTHING redirected. So....how does one go about sorting this out? I will not switch the profiles from mandatory as they've been brilliant like they are, and i will not remove folder redirection, so i need a solution to this that involves a new way of doing it rather than bodging the current way of doing it.
Thanks for any help on this, PLEASE SAVE ME FROM NORTON INSTALLATIONS!