My friend has a father who was stung by scammers so he is now looking to lock down his fathers Win 10 pro laptop to stop him installing software other than what he has already installed and preventing popups and the like when he is browsing. This question is more of a general one as it doesn't actually refer to my work environment but rather a friend asked me for advice.
