Active Directory我在一台服务器上设置了一个Windows Server 2012，我想创建一些具有限制的用户，就像Windows Steady State在Windows XP（本地）中一样。
已经看到了Windows SteadyState Handbook（带有Windows Server 2008），但我想知道是否有人尝试过这个，其限制如下：
1. Prevent locked or roaming user profiles that cannot be found on the computer from logging on
2. Do not cache copies of locked or roaming user profiles for users who have previously logged on to this computer
3. Do not allow Windows to compute and store passwords using LAN Manager Hash values
4. Do not store usernames or passwords used to log on to the Windows Live ID or the domain
5. Prevent users from creating folders and files on drive C:\
6. Lock profile to prevent the user from making permanent changes
7. Remove the Control Panel, Printer and Network Settings from the Classic Start menu
8. Remove the Favorites icon
9. Remove the My Network Places icon
10. Remove the Frequently Used Program list
11. Remove the Shared documents folder from My Computer
12. Remove control Panel icon
13. Remove the Set Program Access and Defaults icon
14. Remove the Network Connection(Connect To)icon
15. Remove the Printers and Faxes icon
16. Remove the Run icon
17. Prevent access to Windows Explorer features: Folder Options, Customize Toolbar, and the Notification Area
18. Prevent access to the taskbar
19. Prevent access to the command prompt
20. Prevent access to the registry editor
21. Prevent access to the Task Manager
22. Prevent access to Microsoft Management Console utilities
23. Prevent users from adding or removing printers
24. Prevent users from locking the computer
25. Prevent password changes (also requires the Control Panel icon to be removed)
26. Disable System Tools and other management programs
27. Prevent users from saving files to the desktop
28. Hide A Drive
29. Hide B Drive
30. Hide C Drive
31. Prevent changes to Internet Explorer registry settings
32. Empty the Temporary Internet Files folder when Internet Explorer is closed
33. Remove Internet Options
34. Remove General tab in Internet Options
35. Remove Security tab in Internet Options
36. Remove Privacy tab in Internet Options
37. Remove Content tab in Internet Options
38. Remove Connections tab in Internet Options
39. Remove Programs tab in Internet Options
40. Remove Advanced tab in Internet Options
41. Set a home page (Internet Explorer)
42. Restrict the possibility to change desktop image
43. Restrict the possibility to change wallpaper
44. Restrict usb flash drives
对此有什么建议吗？
更新2：
我将为能帮助我的人提供 50 积分的赏金
更新：
正如@Dan 建议我的那样，我想指定将其应用于教育场景，其中学生可以从计算机登录并希望为他们添加一些限制。
答案1
根据对列表的粗略审查，您应该能够使用组策略管理所有这些设置。为计算机设置创建一个 GPO，为用户设置创建另一个 GPO，并将它们链接到适当的容器或 OU。您可以在每个 GPO 中使用安全筛选将每个 GPO 应用于特定用户和计算机。