Engine · Interactive tool

Policy Recommendation Engine

Not sure how locked down your machines should be? Answer six questions about who uses them and what they do - and get a recommended starting policy you can refine.

CtrlOne ships three curated onboarding templates: Office Baseline for staff computers, Lab / Classroom for shared machines, and Kiosk Lockdown for public or single-purpose stations. This engine points you at the right starting point.

The recommendation is based on how the machines are used, what software they need, how much of the desktop should be visible, and how sensitive the data is. It runs entirely in your browser - your answers are never sent anywhere.

1. What best describes these PCs?
  • Staff office computers with assigned users
  • Shared classroom or lab computers
  • Public / self-service kiosks or single-purpose stations
2. Should users install or run their own software?
  • Mostly yes - they need flexibility
  • A small, approved set only
  • No - only exactly what we provide
3. How much of the Windows desktop should users see?
  • The normal desktop, with some guardrails
  • A limited, curated desktop
  • Almost nothing - a single app or locked shell
4. Removable storage and peripherals?
  • Allowed
  • Limited by device class
  • Fully blocked
5. When are these machines used?
  • Normal working hours, attended
  • During set hours (a good fit for scheduling)
  • Public-facing or unattended much of the time
6. How sensitive is the data these machines handle?
  • Low sensitivity
  • Some sensitive data
  • Regulated or high sensitivity

This is a starting-point recommendation, not a finished policy or formal advice. Your answers and result stay in your browser - nothing is sent to a server or saved. Every template is a starting point you refine for your environment.

Complete the questions above to calculate your control level entirely in your browser.