Windows 7 Enterprise 32 bit Security Management

What are some options/recommendations for enabling built-in Security Management in Windows 7 Enterprise 32 bit and/or using third party software?

A few possible options:

Manually Configuring SRP, etc.
Using Powerbroker Desktops for the configuration
Using AppGuard Enterprise
Using Faronic's Anti-Executable

Goal: To minimize the chances of Laptop PC's becoming infected with Malware which could pose a Security Risk when these Laptops are connected to an isolated Secure Network.

Thanks in Advance.

 

Applying security baselines via SCM Toolkit...

-http://technet.microsoft.com/en-us/library/cc677002.aspx

 

SRP & Group policy with MS Endpoint Security