Is it feasible to lock down a user account on a Windows 7 or Windows Vista laptop so that it's not possible to copy files off of it? (e.g. disable all internet access, disable USB ports or at least ensure drives can't be mounted to them, etc).
Is there a published procedure to do that?
Also, if the files are encrypted on disk using Windows encryption, is knowledge of the guest user password on the laptop enough to access those files if the hard drive is plugged into another computer?
I do realize that a sophisticated hacker can probably counter pretty much any security measure. The intent is to prevent copying files off of the laptop by power users, not by hackers.