Group Policy, Global Policy, Desktop Policy, Server Policy
Ok, add one more Murray's Policy Group, I have been known to lock down a few systems in the name of "Stop making system changes".
This section is all about you and your internal policies. You don't have to touch your computer policy at all but if you do it's a good idea to follow some good advice from time to time. Your IT Admin should be your first point of contact. If you don't have one or can't get past the voice mail send me a note and I'll publish a few policies based on your internal policy needs or requirements. HIPPA users welcome to apply.
First of all, if you export your policy before you start editing it you'll feel much better.
Then the one command you must always remember so you don't wonder why things aren't changing is the forceupdate group policy. Ready?
- Windir system32 (%windir%\system32)
- /target: [computer | user]
- /wait: timevalue
Now that you are armed with the commands why not disable the control panel on your kids system remotely.
No, I'm kidding but if you have office workers that just can't seem to stay out of system settings you can do just that with group policies or local policies.
Keep your USB Stick handy so you can backup before your gpupdate.exe /force that policy on a computer.
Look for articles here about what good settings you can use to help protect your systems. If you have community shared computers it is strongly suggested you learn how to change the policies on that system or the controller if on a domain controled network.