Hi,
I've joined my Windows 7 reference PC to our domain and used group policies to lock down the machine. However I've noticed that in My Computer standard domain users can highlight say the c: drive in My Computer and click the Properties button (to the right of the Organize button). They can then view the drive's properties and do terriable things such as tick the 'Compress this drive...' box.
I've been through GP to look for an option to remove this but cannot find anything. I have managed to find GP settings to remove the 'Uninstall or change a program' button from My Computer. I need to leave the 'New Folder' button.
Can anybody suggest a way to lock this option?
Also: do you guys have any other hints and tips for locking down a Windows 7 machine as our College has a few pupils who know more than they ought to!
Thanks, Matt
--------------------------------------------------------------------------------
Matt Courtman, Network Manager, Cromwell Community College, UK