Best Practice Security w. GPOs

[Gongalong]

Hi folks,

 

Following on from my previous post, is there such a thing as a resource covering best practice in terms of what items should be locked down in a school via GPO?

 

If not, how do people know what to lock down, short of ploughing through the many many options?

 

TIA

[Ephelyon]

Personally I just plough... but when I move on I'll be taking a good number of our GPOs with me!