we're going to be rolling out some laptops with Windows 7 Home Premium 64-bit on them to clients and are looking for ways to lock down the majority of Windows settings (version, updates, etc.).
I know SteadyState (free tool from Microsoft) has worked well for many users of XP and Vista, but sadly there's no Windows 7 support.
After some Googling, it looks like Deep Freeze may be an option. Are there any other tools out there that people have used and like? Any other ideas?
Thanks!
Use GPOs (even local ones) to lock it down. There's tons of info on MS's website.
MS also publishes framework documents regarding security practices, for Windows 7.
One you think you've got it locked down a bit, run the MBSA and it'll generate a report on any glaring errors it finds.
I'd also recommend dumping the Home Edition, get Pro/Ent/Ult (something made for business).
Running gimmicky "we'll plug up all your security holes" software tends to give you the impression that you don't need to think about security practices. While it might tighten up security, users are by far the biggest security problems.
Just recently MS released information on how to create a SteadyState like environment in Windows 7, hope this helps someone:
Group Policy Settings for Creating a Steady State
We use DeepFreeze at the college where I work on all public machines, and it's great. However, it might be a little too restrictive for what you want.
