We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now


Hide programs/items from control panel via Group Policy?

Solpak asked
Medium Priority
Last Modified: 2012-05-06
Hello people,

Have a quick question, have just more or less sorted our domain group policy...I have 2 seperate group policies one for User and one for Computers...all defined by groups/uers in security groups..

I made 2 changes in the Computer group which was to disable the Windows Firewall Service...and also Disabled it via Network connections (both for domain/standard)

Found that it works fine and in the control panel it is disabled..however the Startup Type is still available to me so for the Firewall Service I can select it back to Automatic and start the service again...

Ideally would like to stop that too...also if I went to control Panel/Firewall and double click on it..it says that the Firewall Service cannot be started..but asked if me if I want to start the service again!

This is not ideal...is there a way I can either hide the icon or stop users from attempting to start the service?
Watch Question

have a nose through this. Should be of use.

Create a new Group Policy object, and give the object a descriptive name (for example, ITS-Turn off Windows Firewall).
Select the newly created group policy.
Right-click on the newly created policy and select Edit.
Expand the Computer Configuration folder, then the Administrative Templates folder.
Expand the Network folder, then the Network Connections folder, then the Windows Firewall folder.
Select the Standard Profile folder.
Double-click the Windows Firewall: Protect all network connections option.
Select Disabled, then click OK.
Select the Domain Profile folder.
Double-click the Windows Firewall: Protect all network connections option.
Select Disabled, then click OK.
Close the Group Policy dialog box.
In the Security Filter section, click Add.
Search for the objects that this group policy will be applied to, then click OK.
Close the Group Policy editor.

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
SolpakTechnical Director


Have tried all of the solutions above..I meant to remove the icon or disable it..

I can disable the firewall but the startup type can still be changed 'IF' the user wanted to but started the process (if they selected startup type to automatic)
but if you disable the firewall in group policy then user should not be able to start it via any way.

Does the user you are testing have any domain or local admin rights?
SolpakTechnical Director


sorted this myself within group policy...services then the appropriate service..click edit security and change permissions!!!

Now 'if' a user was to change it it comes with Error 5 Access is denied.

Please close.
As i stated Use the correct group policy and as long as they are not a admin then they will be denied.
Why wont you give me the points?
SolpakTechnical Director


No problem will allocate the points while you was very helpful..you did not mention anywhere that I had to edit the security and change permissions..also the term "Use the correct group policy" as im very new to this and not quite the expert yet :D

But its cool your links did prove useful and will give you the points..thanks again :)
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.