There are many, many more security-related settings available inside Group Policy; it's simply impossible to cover all of them. Now that you have some baseline knowledge of how to implement these policies and where the security settings are stored in Group Policy (all over the place!), the possibilities are endless for coming up with creative new ways to lock down your systems. To me, creating a secure environment is the number one reason to utilize Group Policy in any domain environment, and I think that the majority of companies out there would increase their use of GPO security settings tenfold if they took the time to sift through the options and figure out what they really want from a desktop lockdown policy.

In addition to some sample ad-hoc settings that are useful to incorporate into almost any environment, we spent quite a bit of time discussing the WFAS. This updated firewall console is enterprise-class, and ready to protect your systems. Using Group Policy to configure WFAS in your environment should definitely be on your to-do list.

Now we find ourselves wandering into the less exciting land of Group Policy Maintenance. Nobody wants to spend time maintaining their Lamborghini; they would rather be out driving it! But alas, without some care and planning the wheels will eventually fall off. Let's go change the oil.