Step by Step Block a User to Access Control Panel. , Group Policy to Block a User from Control Panel

Step by Step Configuring Group Policy in Windows 2003.

Windows 2003 has an excellent feature called Group Policy to allow , restrict and add permission to a specific OU ( Organizational Unit ) rather than applying policy on separate machines/Users.

This step by step article will help you enable to how block a user or group of Users from accessing Control Panel and Others Windows Feature that you disabled.

Step 1

First you need to Open “Active Directory Users and Computers”

Step 2

Right click on your Domain and Create a New OU

Step 3

Add the 3 Users to the OU.

Step 4

Right Click on OU that you created for Students, ( In my Case I have Created OU named “Student”)

And click “properties”, Move to Group Policy, Click New and Give the Group Policy a name.

Click Edit and Move to User ConfigurationàAdministrative TemplatesàControl Panel

Double Click on “Prohibit Access to the Control Panel” , and check mark the “Enabled” Radio Button.

Click Apply and ok. Close all the Windows and Open Run .

Type the following command

gpupdate /force 

The following window will appear

Write y and enter to reboot the system.

Now Log on to the any system by any user you entered into the OU. For Example “student 1”

You will see that the Control Panel Icon is removed from both the Start Menu and Also From My Computer.

Cheers,

Himayat Ullah Khan.