8 Best Group Policy Settings
So you want to lockdown windows computer and stop users from installing software, changing settings or anything else? well you can with group policy editor, you will need Windows 10 or Windows 11 pro or above to get access to GPO.
1. Prohibit access to the control panel
User Configuration / Administrative Templates / Control Panel
2. Prevent access to the command prompt
User Configuration / Administrative Templates / System
3. Deny all removable storage access
User Configuration / Administrative Templates / System / Removable Storage Access
4. Prohibit users from installing unwanted software
Computer Configuration / Administrative Templates / Windows Components / Windows Installer
5. Guest account status settings
Computer Configuration / Windows Settings / Security Settings / Local Policies / Security Options
6. Do not store LAN Manager hash values on next password changes
Computer Configuration / Windows Settings / Security Settings / Local…