Restricting all users except admins from accessing the Control Panel on WinXP Pro?

I need to create a policy to restrict all users except administrators in a workgroup from accessing the Control Panel on Windows XP Professional, without using third-party utilities or directly editing the registry. Is there a way to do this?
I'm hoping by "workgroup" you mean that you all "work together"; that is, you don't mean "workgroup" in the "I'm using Windows in a Workgroup configuration" sense. Instead, let's call them our "OU Administrators." So, if you want to restrict Control Panel access to all users in an OU, but "pass over" the GPO from processing for our OU Administrators, it's a two step process.

First, create the GPO and apply it to the OU to restrict the Control Panel. The policy setting you're after is User Configuration | Administrative Templates | Control Panel then enable the "Prohibit access to the Control Panel." Then, use "Security Filtering" upon the GPO you create. At this point, you have two options: you can add all the user accounts you want to get the GPO to a Windows security group, and ensure they get the "Read" and "Apply Group Policy" permissions upon the GPO. Or, you can add all the user accounts you DON'T want to get the GPO and DENY them the ability to "Apply Group Policy" permission.

Note: If you have my Windows 2000: Group Policy, Profiles and IntellMirror text, you can see how to do this on Page 48-50.

This was first published in November 2003
This Content Component encountered an error



Find more PRO+ content and other member only offers, here.

Have a question for an expert?

Please add a title for your question

Get answers from a TechTarget expert on whatever's puzzling you.

You will be able to add details on the next page.



Forgot Password?

No problem! Submit your e-mail address below. We'll send you an email containing your password.

Your password has been sent to:









  • Virtual desktop security guide

    To secure virtual desktops, consider antivirus, certificates and network vulnerabilities. Just remember, VDI doesn't always ...

  • Guide to low-cost desktop virtualization

    In this guide, learn to virtualize desktops without spending more than you would when deploying PCs, and what VDI vendors are ...

  • VDI pilot project guide

    A VDI pilot project should start with a VDI project plan. Know what pitfalls to avoid and test product options to achieve a ...