Does anyone use CSA for desktop lockdown or is it too cumbersome for that task and 3rd party products are being used with it? I just want some essential user lock down capability: limit access to control panels, restrict USB, control network settings to limit wireless, etc.
We have almost 3500 desktops and laptops with CSA. They have the standard policies and we make exceptions for any 3rd party products that generate alerts.
It can do as little or as much as you want it to based on your needs and your willingness to fine tune it.
You may want to augment CSA with something like Windows Steady State for a more secure desktop.
I have this running on Public Access kiosks along with CSA and it works quite well for locking down the OS and the user environment.