GPO: no "Control Panel"

Posted on 2013-02-06
Medium Priority
Last Modified: 2013-02-06

This is related to configuring the GPO for the Workstations in the enterprise environment. I saw in a company as the followings:

-      For a certain group of users; say it; user: “Sales” (around 30 workstations)
-      When “Sales” login to the workstation, she/he cannot see the “Control Panel”
-      But,  when a member of domain admin, login to the above workstation, he/she can see the “Control Panel”

My Question: How to create a GPO for it?

Thank you

Question by:tjie
LVL 20

Assisted Solution

strivoli earned 600 total points
ID: 38859252
GPOs are applied at a AD level (domain/site/OU) and can be applied to groups of users (this is why it is called 'Group Policy Objects') or more generally to groups of objects which might include computers as well.
Your best bet to start working with GPOs without messing with other settings is to create a new OU in AD. Place a non critical computer (not the boss one) and a non critical user (not the boss or the Administrator) in the newly created OU and create a GPO in this OU. Once you've created this GPO you can try any settings you wish.

Accepted Solution

TunerML earned 1000 total points
ID: 38859331
Just to expand on strivoli, Group Policy Management is found in Administrative Tools under the start menu. You can use this tool to create, edit, modify and assign GPO's to OU's. The setting within the policy that relates to the control panel is:

User Configuration\Administrative Templates\Control Panel

However as you seem to not have much experience with GPO I would follow strivoli and get some practice on a non-critical system or lab environment first.

LVL 10

Assisted Solution

by:Pramod Ubhe
Pramod Ubhe earned 400 total points
ID: 38859407
Go to gpmc (group policy mgmt console, you at required to install it using gpmc.msi) create a GPO based on your needs and apply it to the target OU.
In the scenario you mentioned, GPO's must have set to be filtered for specific group which is authenticated users by default.

Featured Post

Never miss a deadline with monday.com

The revolutionary project management tool is here!   Plan visually with a single glance and make sure your projects get done.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

High user turnover can cause old/redundant user data to consume valuable space. UserResourceCleanup was developed to address this by automatically deleting user folders when the user account is deleted.
The article explains the process to deploy a Self-Service password reset portal I developed a few years ago. Hopefully, it will prove useful to someone.  Any comments, bug reports etc. are welcome...
This tutorial will show how to configure a new Backup Exec 2012 server and move an existing database to that server with the use of the BEUtility. Install Backup Exec 2012 on the new server and apply all of the latest hotfixes and service packs. The…
Are you ready to implement Active Directory best practices without reading 300+ pages? You're in luck. In this webinar hosted by Skyport Systems, you gain insight into Microsoft's latest comprehensive guide, with tips on the best and easiest way…

600 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question