Thanks for the detailed advice, Brandon.


>Here are some notes on this. Keep in mind even if you hide the drives, you still need to make sure the effective permissions are correct because there are ways to get around hiding the drive letters (\\localhost\c$).
>
>Click start and type gpedit.msc.
>Enable the following policies.
>User Configuration >Administrative Templates>Control Pannel >Prohibit access to the control panel. (you will have to undo this to load updates or add new users. Just remember to set it back to enabled after you are done doing what you need to do.)
>
>User Configuration >Administrative Templates>Control Panel>Programs> Hide Programs and Features page. Set to enabled.
>
>User Configuration >Administrative Templates>Windows Components>File Explorer>
>Hide these specified drives in my computer (A,B,C,D)
>No entire network locations.
>Remove map network drive and disconnect network drive.
>Remove search button from windows explorer.
>Prevent access to drives in my computer (A,B,C,D)
>No computers near me in network locations.