Computer step by step
 Make your Pc better
Description:  

Disables all Control Panel programs.

This setting prevents Control.exe, the program file for Control Panel, from starting. As a result, users cannot
start Control Panel or run any Control Panel items.

This setting also removes Control Panel from the Start menu. This setting also removes the Control Panel
folder from Windows Explorer.

If users try to select a Control Panel item from the Properties item on a context menu, a message appears
explaining that a setting prevents the action.

Supported on: At least Windows 2000.
Prohibit access to the Control Panel
Description Gpedit Regedit CMD Back VBScript PowerShell Script
Gpedit:   

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
Type gpedit.msc and press Enter
In the Group Policy window please navigate to User Configuration -> Administrative Templates ->
Control Panel and open Prohibit access to the Control Panel.
Not Configured -> is the Default state
Enabled -> apply this GPO
Disabled -> this GPO will not be applied

To finish press ok button and close Group Policy window.
Type regedit and press ok
Please confirm User Account Control pop-up
Microsoft official disclaimer

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by
using another method. These problems might require that you reinstall the operating system. Microsoft
cannot guarantee that these problems can be solved. Modify the registry at your own risk.

Note: This registry key is created by Group Policy when this GPO is Enable. The GPO Default state is Not
Configured -> this registry entry is not present. For Disable this registry entry is not present.

Please navigate to HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies
\Explorer
and locate NoControlPanel registry key
Regedit:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
   
Double click on NoControlPanel and edit the value:

To Enable:
Change the data value with:
NoControlPanel = 1

To finish press ok button and close Registry Editor window

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
Type cmd, right click on cmd icon under the Programs and click on Run as administrator
Please confirm User Account Control pop-up
Please select, right and copy a registry key from below, then right click on command prompt window
, select Paste and press Enter

Enabled:
REG add "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoControlPanel /t REG_DWORD /d 1 /f

Not Configured:
REG DELETE "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v NoControlPanel /f

Note: Manual editing of this registry key will not be reflected in Group Policy. If you modify this GPO from
Group Policy this registry key will be rewritten.
CMD:          

Please perform the following steps:

Please go to Pearl button (Start) and click on the Search programs and files
For more information about the change from Start to Pearl button click here
   
VBScript:          

Const HKEY_CURRENT_USER = &H80000001
strComputer = "."
Set oReg=GetObject("winmgmts:{impersonationLevel=impersonate}!\\" & _
strComputer & "\root\default:StdRegProv")

strKeyPath = "Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
oReg.CreateKey HKEY_CURRENT_USER,strKeyPath
strValueName = "NoControlPanel"
'Enabled
dwValue = 1
oReg.SetDWORDValue HKEY_CURRENT_USER,strKeyPath,strValueName,dwValue
'Not Configured
'oReg.DeleteValue HKEY_CURRENT_USER,strKeyPath,strValueName
   
PowerShell Script :          

Enabled

$RegKey = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies"
If(Test-Path ($RegKey + "\Explorer"))
{
 $RegKey = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
  ##Enabled
  New-ItemProperty -path $RegKey -name NoControlPanel -value 1 -PropertyType DWord -Force
}
else
{
 New-Item -path $RegKey -name Explorer
 $RegKey = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer"
  ##Enabled
  New-ItemProperty -path $RegKey -name NoControlPanel -value 1 -PropertyType DWord
}

Not Configured\Disabled

$RegKey = "HKCU:\Software\Microsoft\Windows\CurrentVersion\Policies"
Remove-ItemProperty -Path($RegKey + "\Explorer") -name NoControlPanel
If( (Get-Item -Path($RegKey + "\Explorer")).ValueCount -eq 0 -and (Get-Item -Path($RegKey + "\Explorer")).SubKeyCount -eq 0)
{
 Remove-Item -Path($RegKey + "\Explorer")   
}
   
Up Back
   
Result
By Default you have access to "Control Panel" under Start.
You can prevent users from using "Control Panel" using Group Policy or modify the specific registry key.  

Note: If you want to prevent a specific user from using "Control Panel" you need to modify or add the
registry key under his SID.