I have a Windows 7 Pro 64-bit machine that will be hosting three Windows 7 Pro 64-bit VMware Player 7 virtual machines. I have the first VM completed and am about to create the first standard user on that VM. Standard users will only have access to a single Excel 2007 workbook application (I've worked through all of the Excel non-multi-user and licensing issues already), the Recycle Bin, and a single folder set up for them to use as file storage for new workbooks that they create from the Excel 2007 workbook application - everything else will be locked down, especially file transfer.
If this is correct, then what is the recommended best approach to lock down the standard user? I'm operating in a workgroup environment - there's no domain controller or Active Directory. From extensive reading it appears that there are two methods I could use - Multiple Local Group Policy Objects (MLGPO) or Sysprep and the default user profile.
I really don't want to create an administrative workstation just to create and manage the lock-down configuration for a total of 1 user (assuming that the original standard user configuration can somehow be applied to 4 additional standard users on the VM that I've already created, then cloned with the creation of the next two new VMs). To summarize, here's what I need to be able to do:
- Apply the lock-down configuration from the first standard user to 4 additional standard users on the VM that I've already created.
- All 5 standard users present on my first VM (the one I've already created) will be replicated without change when two new VMs are cloned from my existing VM in the future.
Given my situation, what do you recommend as the most efficient and reliable approach to deal with this challenge?
Thanks In Advance For Your Help!