Customized Windows images may contain sensitive or proprietary information. To secure your images when using Windows Deployment Services, do the following:
1. Create a security group named Installations (or something similar) to contain the users who will be allowed to install images from your Windows DS server.
2. Open the Windows Deployment Services console, select your Windows DS server, expand the Install Images node, and right-click on an Image Group and select Properties.
3. Select the Security tab and grant Read and Execute permission for the Installation group, and remove any permissions for accounts other than SYSTEM and Administrators. Repeat for each additional Image Group in your server's repository.
Security settings applied to Image Groups automatically propagate to images within those groups. You can also secure images individually using the Security tab on their properties sheets.
