Рет қаралды 108
Step-1. Edit the GPO settings
Now, right click on the newly created GPO and select edit.
Browse to User Configuration - Policies - Administrative Templates - Control Panel
Open the policy Prohibit access to Control Panel and PC Settings.
Click on “Enabled” to enable this policy. Then click on OK.
All done!
Then Open Command mood & write the command (gpupdate /force)
Now, I’ll log into a computer and verify that access to the control panel is blocked.
I’m logged into the computer as user “mamun”, a user in the Accounting OU. When trying to access the control panel the user gets the below message.
Show Only Specified Control Panel Items
If you want users to have access to only specific control panel items follow these steps.
Step 1. Create and link a New GPO
Open the group policy management console.
Browse to the OU, right click and select “Create a GPO in this domain, and Link it here”
Give the GPO a name. I’ve called mine “User - Limit Control Panel Items”.
Create and link a new GPO and enable the Show only specified Control Panel items policy.
Step 2. Edit the GPO Settings.
Now, right click on the newly created GPO and select edit.
Browse to User Configuration - Policies - Administrative Templates - Control Panel
Next, open the policy “Show only specified Control Panel items”.
Click on Enabled.
Then click on the show button.
To display a control panel item you need to enter the control panel item’s canonical name.
For example, I want to only disable the keyboard and Mouse.
Refer to the Microsoft article Canonical Names of Control Panel Items to see a full list of canonical names.
I’ll then enter the canonical names into the GPO settings.
Click ok and OK again when done.
Now when the user opens the control panel they will only have access to the items listed in the GPO.
In the below example, the user "mamun" from accounting only has access to the keyboard and mouse control panel items.
I hope you enjoyed this article. If you have questions or comments, post them below.
@Itdoctors75