As you well know, almost anything about a Windows computer can be manipulated through a combination of the Control Panel and the Settings menu in the newer operating systems. Allowing users to have access to these utilities is a security risk, because they typically have no valid reason for accessing and changing these kinds of settings. Let's find out whether there is a quick way to completely disable access to both the Control Panel, as well as Settings for your domain-joined PCs:
User Configuration | Policies | Administrative Templates | Control Panel | Prohibit access to Control Panel and PC settings
Look at that! There is a single user configuration setting that looks like it is going ...
