I found a nice offical tool from Microsoft to secure the information – pc.
You can use these tool to configure varied settings for different users (AD user accounts as well). For example you can disable the right-click in Windows Explorer or prevent access to command prompt. I think this program would be a perfect fit for me to solve my task and for everyone who is not confident to edit the registry.
Windows Disk Protection (WDP) is an other part of the tool. WDP helps protect the Windows partition, which contains the Windows operation system and other programs, from being modified without administrator approval.
And its for free!
A good tutorial for Windows Steady State:
PS: Final Groundhopping Part IV will be released on sunday 27 june!