We have 10 laptops joined to our domain that we will be loaning to employees for sole the purpose of accessing their desktop PC from meeting rooms in the office or else from their home.
The only thing the users should be able to do is log in and have the ability to use the Remote Desktop application to access their primary work PC full screen.
If they are going to use the laptops at home, they will also need to have the ability to join their home wireless network and launch the Cisco VPN client so they will have a working connection to the office network that's required to use the Remote Desktop App.
The laptops will not have any software installed other than Cisco VPN and any software prerequisites needed for the VPN software to install and run properly.
When they log into the laptop, all they should see and have access to is the Cisco VPN software, Remote Access app and what ever minimum UI they need to join a wireless network and log off/shut down the laptop etc..
Most of the users will be new to Windows 8 and it is important they they cannot get "lost" and become confused on how to find or launch the VPN and remote desktop not be able to find their way out of apps so they can shut down the laptop when they are finished. We will likely need to put shortcut icons to log out and shutdown the laptop on both the desktop and start menu or tell them to just press the power button when they're finished.
They also need to be restricted from copying files on or off the laptop so that the laptops can be exempted from drive encryption mandates.
Can this be done through local or AD group policy settings?
