Windows 10 in a domain. What to cut off through gpo?

Question

System administration

In light of the fact that the axis is extremely "prone to leaks", I would like to discuss SPECIFIC steps on what should be chopped off. The question is clearly not from the category of "There is a ready answer." Therefore, I would like regular replenishment with fresh information. If someone dug up something.

Answer 1

Cut off internet access.
It's too early to use Win10 in a domain. For test purposes only.

Answer 2

Maybe it's better to cut it off on the extreme firewall?

Answer 3

the persistence with which the soft ones advance this axis even scares me so much ..) you
will have to stay on the eternal seven and wait for the friendly nix to appear (although the niks have been friendly for a long time, there is one thing - how they finish the open / libre office to a bug-free pairing with the "flagship" from small - so the point of no return will be passed ..), plus emulation for some software that lives under wines .. but here, in extreme cases, you can install one megaworkstation and pack it with such software - and for clients enter via rdp )..