There is no single method - it depends on the environment the machine is in.
Within a Corporate AD managed environment it would be quite different from a home environment.
Depends on how deep you want to get and how much you NEED to secure !!
For a quick one, this tool is pretty good O&O ShutUp10
There are many tools and each one does it's own slant on things, none would do all you need perfect, as your needs are different to mine to others...
This is more clicky clicky and your done, and TBH if the machine is on the internet with a Windows OS then it is extremely hard to ever make it secure It IS Windows