Locking down a local machine

[slipd]

Hi guys,

I have several machines at work that are networked but have local user accounts on them that's fine but I would like to be able to lock them down a bit more

The only time a user uses the local account is for virtualbox and a few other bits and bobs that aren't on the network - I'd like to keep the host operating system as healthy as possible! Doesn't installing Group Policy Editor locally give me what I'm after?

It would be good if I could disable control panel/hide drives etc.

Thanks.

 

[slipd]

Administrators have local admin accounts but the users using the machine only have the built in users accounts active