GPEDIT settings

Clock > remove from notification area

User Configuration > Administrative Templates > Start Menu And Taskbar
…> Remove Clock From The System Notification Area policy = Enable

Control Panel > remove an icon

User Configuration > Administrative Templates > Control Panel branch
…> Hide Specified Control Panel Items policy = Enabled > Show button > type icon name

Control Panel > show only specified icons

User Configuration > Administrative Templates > Control Panel branch
…> Show Only Specified Control Panel Items = Enabled > Show button > type icon name

Delete confirmations > disable

User Configuration > Administrative Templates > Windows Components > Windows Explorer
…> Display Confirmation Dialog When Deleting Files = Disabled

Notification area > disable & remove

User Configuration > Administrative Templates > Start Menu And Taskbar
…> Hide The Notification Area policy = Enabled

Registry > prevent user access

User Configuration > Administrative Templates > System
…> Prevent Access To Registry Editing Tools = Enabled > Disable Regedit From Running Silently = Yes

Shutdown Event Tracker > enable

Computer Configuration > Administrative Templates > System

…> Display Shutdown Event Tracker = Enabled > Shutdown Event Tracker Should Be Displayed = Always

BitLocker encryption on non-TPM Windows systems

All that is needed is a couple tweaks to Local Policy Settings, a Flash drive, and a few hours to allow encryption to happen.

Note: When configuring policies in Windows 7 and Windows Server 2008, the dialog box provides space to make comments which are
stored with that policy. I would recommend that you add the date and your name to the comments box just in case you need to track
down the changes made.

Note: It is not recommended to keep the recovery key for your encrypted drive on the encrypted drive because you will
be unable to access it in the event you lose your authentication flash drive.