Show only certain Control Panel items

Somtime you want to protect computer users against themselves. Especially in Remote Desktop Session (ie.e. Terminal Server) environments that would be an excellent idea.

One of the things you might want to do is to restrict the control panel items your users can access. In the past you did that by specifying which .cpl applets were permitted. Not so any more - of course

In Windwos Server 2008 R2 (or Windows 7) you specify the NAME of the applet. So no, not the Canonical Name, the GUID, or whatever - the name will do.


Create a policy (or use an existing one)

Depending on where the thing is applied, make User Group Policy loopback processing mode is set correctly

Go to User Configuration | ADministrative Templates | Control Panel and find "Show only specified Control Panel items"

Enable the value, then enter the values you need. NB: A list of all Windows 7 applets can be found on MSDN.