Question : How to locak down Windows 7 PRO workstations

I need to be able to prevent users from altering, adding or making potentially catastrophic system changes. I have tried giving standard user permissiosn but then the user is not able to create shortcuts, open programs etc without needing admin permissions, what can be done to allow a user to create and open any programs yet prevent them forma dding or removing programs. Should this be doen through local GPO for a specific users profile? or woudl the GPO changes impact the system as a whole?

Answer : How to locak down Windows 7 PRO workstations

You can setup a local gpo on a machine to your liking limiting the use as admins and then export that gpo to the others, Here's a link to one way of exporting a local gpo.
Good luck.

PS  Would not mind a copy myself as it's been on my long list for a while!  :-) LOL