I have an ssl certificate in place on my IIS Web server and forced encryption so no user can access the web page without an SSL certificate on their workstation.
What If I wanted to lock down the workstation even more?
How would I setup so that the workstation running Windows 7 couldn't access the server at all unless it was an SSL connection?

Deploy that cert via GPO use security filter .

1. You need to create a security group for win7 computers.

2. Add win7 computers into that security group.

3. Remove authenticated users from GPO.

4. Add that security group there.

Also you can use security tab from the certificate template console(certtmpl.msc). You can add that security group for enrol & auto-enrolment.

Regards
Biswajit Biswas
My Blogs|TechnetWiki Ninja