removing control panel access from one profile

  • Thread starter Thread starter eª®-lµtîol\\l
  • Start date Start date
E

eª®-lµtîol\\l

Hi

I've tried using Policy Editor (under Tweak UI), but it seems to have a
global effect - no good @ all

TIA
 
Local group policy applies to all users (Domain policy is far more granular). What GP does is (mostly) write registry entries. You can write them direct in which case you can apply exactly how you want. GP writes the registry entry at every boot and logon and at other times.

NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Data type Range Default value
REG_DWORD 0 | 1 0

Description
Prevents Control.exe, the Control Panel executable file, from starting. As a result, users cannot start Control Panel or run any Control Panel programs.

A value of 1 also removes Control Panel from the Start menu, and removes the Control Panel folder from Windows Explorer. If users try to start a Control Panel program by using another method, a message appears explaining that a policy prevents the action.

This entry stores the setting of the Disable Control Panel Group Policy. Group Policy adds this entry to the registry with a value of 1 when you enable the policy. If you disable the policy or set it to Not configured, Group Policy deletes the entry from the registry and the system behaves as though the value is 0.

Value Meaning
0 (or not in registry) The policy is disabled or not configured. Enables Control Panel and Control Panel programs.
1 The policy is enabled. Disables Control Panel and Control Panel programs.

Change method
To change the value of this entry, use Group Policy. This entry corresponds to the Disable Control Panel policy (User Configuration\AdministrativeTemplates\Start Menu & Taskbar).

Note

This entry does not disable the programs that appears as folders in Control Panel, such as Network and Dial-up Connections, Scheduled Tasks, or Fonts. To disable these programs, use the Disable programs on Settings menu policy (NoSetFolders.

Tip

For detailed information about particular Group Policy settings, see the Group Policy Reference (Gp.chm) on the Windows 2000 Resource Kit companion CD.

For general information about Group Policy, see Group Policy in Windows 2000 Help.

To see a table associating policies with their corresponding registry entries, see the Group Policy Reference Table.
 
really useful m8

thanks for such a detailed explanation :-)


Local group policy applies to all users (Domain policy is far more
granular). What GP does is (mostly) write registry entries. You can write
them direct in which case you can apply exactly how you want. GP writes the
registry entry at every boot and logon and at other times.

NoControlPanel
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer

Data type Range Default value
REG_DWORD 0 | 1 0

Description
Prevents Control.exe, the Control Panel executable file, from starting. As a
result, users cannot start Control Panel or run any Control Panel programs.

A value of 1 also removes Control Panel from the Start menu, and removes the
Control Panel folder from Windows Explorer. If users try to start a Control
Panel program by using another method, a message appears explaining that a
policy prevents the action.

This entry stores the setting of the Disable Control Panel Group Policy.
Group Policy adds this entry to the registry with a value of 1 when you
enable the policy. If you disable the policy or set it to Not configured,
Group Policy deletes the entry from the registry and the system behaves as
though the value is 0.

Value Meaning
0 (or not in registry) The policy is disabled or not configured.
Enables Control Panel and Control Panel programs.
1 The policy is enabled. Disables Control Panel and Control Panel
programs.

Change method
To change the value of this entry, use Group Policy. This entry corresponds
to the Disable Control Panel policy (User
Configuration\AdministrativeTemplates\Start Menu & Taskbar).

Note

This entry does not disable the programs that appears as folders in Control
Panel, such as Network and Dial-up Connections, Scheduled Tasks, or Fonts.
To disable these programs, use the Disable programs on Settings menu policy
(NoSetFolders.

Tip

For detailed information about particular Group Policy settings, see the
Group Policy Reference (Gp.chm) on the Windows 2000 Resource Kit companion
CD.

For general information about Group Policy, see Group Policy in Windows 2000
Help.

To see a table associating policies with their corresponding registry
entries, see the Group Policy Reference Table.
 
Back
Top