none
Group policy not applied

    Question

  • Virtual environment (Single Domain, Single DC, Single Client)

    Group Policy not applied to the client

    >Ran GP Result wizard against the target computer---Status- Applied (Policy to disable the control panel)

    However when tested in the client the policy doesnt seem to work

    Scope and security filter already checked

    Any thoughts?

    Wednesday, June 17, 2015 4:53 AM

Answers

  • Hi Nimal,

    You can configure the group policy setting via this way:

    Open GPMC>> select the gpo>> edit>> User Configuration>> Policies>> Administrative Templates>>Control Panel>>Prohibit access to the Control Panel>>enabled.

    If you enable this policy setting, you prevent Control.exe from starting. As a result, users cannot start Control Panel or run any Control Panel items. It also removes Control Panel from the Start menu, and it removes the Control Panel folder from Windows Explorer.

    If users try to select a Control Panel item from the Properties menu, a message appears that explains a policy setting prevents the action.

    Hope it helps.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, June 26, 2015 7:04 AM
    Moderator

All replies

  • Windows 7 or XP clients?

    Some policies were only for Windows XP and others only for Windows 7, specifically for restricting the Control Panel and its items.

    Wednesday, June 17, 2015 5:01 AM
  • >  >Ran GP Result wizard against the target computer---Status- Applied
    > (Policy to disable the control panel)
    > However when tested in the client the policy doesnt seem to work
     
    Which settings do you have in your GPO? And how did you verify it
    doesn't work?
     
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Wednesday, June 17, 2015 8:56 AM
  • can you post gp result ?

    Regards

    Irfan Ahmed

    Wednesday, June 17, 2015 10:10 AM
  • Windows 7 client and the policy is to disable control panel. Mysteriously the GPResult says the policy has been applied.
    Wednesday, June 17, 2015 5:56 PM
  • I verified it by logging into the client machine. It shows control panel and I can open it.
    Wednesday, June 17, 2015 5:57 PM
  • GP result on the client machine


    Microsoft (R) Windows (R) Operating System Group Policy Result tool v2.0
    Copyright (C) Microsoft Corp. 1981-2001

    Created On 6/18/2015 at 2:47:13 AM


    RSOP data for GLOBO\ndas on CLIENT : Logging Mode
    --------------------------------------------------

    OS Configuration:            Member Workstation
    OS Version:                  6.1.7600
    Site Name:                   N/A
    Roaming Profile:             N/A
    Local Profile:               C:\Users\ndas
    Connected over a slow link?: No


    USER SETTINGS
    --------------
        CN=nimal das,OU=Users,OU=NewYork,DC=globo,DC=local
        Last time Group Policy was applied: 6/18/2015 at 2:46:29 AM
        Group Policy was applied from:      NY-DC1.globo.local
        Group Policy slow link threshold:   500 kbps
        Domain Name:                        GLOBO
        Domain Type:                        Windows 2000
        
        Applied Group Policy Objects
        -----------------------------
            cpanel disable

        The following GPOs were not applied because they were filtered out
        -------------------------------------------------------------------
            Default Domain Policy
                Filtering:  Not Applied (Empty)

            Local Group Policy
                Filtering:  Not Applied (Empty)

        The user is a part of the following security groups
        ---------------------------------------------------
            TestCpanel
            Everyone
            BUILTIN\Users
            NT AUTHORITY\INTERACTIVE
            CONSOLE LOGON
            NT AUTHORITY\Authenticated Users
            This Organization
            LOCAL
            Medium Mandatory Level
            
        The user has the following security privileges
        ----------------------------------------------


        Resultant Set Of Policies for User
        -----------------------------------

            Software Installations
            ----------------------
                N/A

            Logon Scripts
            -------------
                N/A

            Logoff Scripts
            --------------
                N/A

            Public Key Policies
            -------------------
                N/A

            Administrative Templates
            ------------------------
                GPO: cpanel disable
                    KeyName:     Software\Microsoft\Windows\CurrentVersion\Policies\System\NoDispCPL
                    Value:       1, 0, 0, 0
                    State:       Enabled

            Folder Redirection
            ------------------
                N/A

            Internet Explorer Browser User Interface
            ----------------------------------------
                N/A

            Internet Explorer Connection
            ----------------------------
                N/A

            Internet Explorer URLs
            ----------------------
                N/A

            Internet Explorer Security
            --------------------------
                N/A

            Internet Explorer Programs
            --------------------------
                N/A

    Wednesday, June 17, 2015 9:18 PM
  • None of the policies are getting applied, however GPresult says the policy has been applied. Weird!!!
    Wednesday, June 17, 2015 9:41 PM
  • > I verified it by logging into the client machine. It shows control panel
    > and I can open it.
     
    Your setting only disables the "DISPLAY" control panel applet, not the
    control panel overall...
     
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    Thursday, June 18, 2015 8:59 AM
  • > I verified it by logging into the client machine. It shows control panel
    > and I can open it.
     
    Your setting only disables the "DISPLAY" control panel applet, not the
    control panel overall...
     
     

    Greetings/Grüße, Martin

    Mal ein gutes Buch über GPOs lesen?
    Good or bad GPOs? - my blog…
    And if IT bothers me - coke bottle design refreshment (-:
    But the control panel is visible in the client. None of the policies are applied. How do you disable control panel then?
    Thursday, June 18, 2015 4:23 PM
  • Any advice?
    Saturday, June 20, 2015 10:32 PM
  • Hi Nimal,

    You can configure the group policy setting via this way:

    Open GPMC>> select the gpo>> edit>> User Configuration>> Policies>> Administrative Templates>>Control Panel>>Prohibit access to the Control Panel>>enabled.

    If you enable this policy setting, you prevent Control.exe from starting. As a result, users cannot start Control Panel or run any Control Panel items. It also removes Control Panel from the Start menu, and it removes the Control Panel folder from Windows Explorer.

    If users try to select a Control Panel item from the Properties menu, a message appears that explains a policy setting prevents the action.

    Hope it helps.

    Best Regards,

    Elaine


    Please remember to mark the replies as answers if they help and unmark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Friday, June 26, 2015 7:04 AM
    Moderator