Do more with group policiesAlthough it might seem intimidating at first, using group policy is definitely the best approach to managing many aspects of a group of computers. Group policy is used for much more than what is outlined in this chapter (such as forcing WSUS to clients), so you will need to use it at some point or another.
Set up folder redirectionUsing folder redirection of My Documents (and in most cases also the desktop) is a must. Important data should always reside on the server where it is properly backed up and not on the workstations.
Lock down usersDo not downplay the threat that your own users pose. Invest time learning how to lock down users as much as needed. Use the templates provided to create a highly managed workstation environment.
Document any changesEach time you modify a setting from its default value you should document it. Don't rely on your memory because it is likely that three months later you will not remember what exactly you blocked to prevent some user from performing a certain task.
