Skip navigation

JSI Tip 3539. How do I prevent users from running any Control Panel applet?

In tips 0235 and 0050, I described the NoSetFolders value name. A data value of 1 removes the Control Panel, Printers, and Network and Dial-up Connections folders from the Settings menu, from My Computer, and from Windows Explorer. It also prevents the programs that these folders represent, such as Control.exe, from running, but users can use other methods for starting Control Panel applets.

In Windows 2000, NoSetFolders corresponds to the Disable programs on Settings menu Group Policy at User Configuration\AdministrativeTemplates\Start Menu & Taskbar.

Windows 2000 also supports the Disable Control Panel Group Policy at User Configuration\AdministrativeTemplates\Start Menu & Taskbar. When Enabled, this policy sets the NoControlPanel value name to 1 at HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer. When Enabled, Control Panel is removed from the Settings menu and from Windows Explorer. users can NOT run Control Panel or Control Panel applets. If a user tries to start a Control Panel applet by other means, they receive a message explaining that this action is prevented by Group Policy. This entry does NOT disable programs that are represented by folders in Control Panel, such as Network and Dial-up Connections, Scheduled Tasks, and Fonts.

Hide comments


  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.