There are many, many more security-related settings available inside Group Policy; it's simply impossible to cover all of them. Now that you have some baseline knowledge of how to implement these policies and where the security settings are stored in Group Policy (all over the place!), the possibilities are endless for coming up with creative new ways to lock down your systems. To me, creating a secure environment is the number one reason to utilize Group Policy in any domain environment, and I think that the majority of companies out there would increase their use of GPO security settings tenfold if they took the time to sift through the options and figure out what they really want from a desktop lockdown policy.
In addition to some sample ad-hoc settings that are useful to incorporate into almost any environment, we spent quite a bit of time discussing the WFAS...
