How to Prevent the Display of Control Panel Icons

• Microsoft Windows NT Workstation version 4.0
• Microsoft Windows NT Server version 4.0
• Microsoft Windows NT Server, Enterprise Edition version 4.0

SUMMARY

To provide enhanced workstation security, network administrators may prevent the display of icons on Control Panel on specific computers using a Windows NT security policy template.

MORE INFORMATION

A preconfigured policy template file can be created for this purpose. To create the policy file:

1. Click Start, click Run, type notepad, and then click OK.



2. Type the following lines into the empty file. You can also use copy and paste commands to place the text into the empty file.




CLASS USER

CATEGORY !!CPL_Icons
POLICY !!CPL_Access
KEYNAME "Control Panel\Don't Load"
VALUENAME "Access.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_AppWiz
KEYNAME "Control Panel\Don't Load"
VALUENAME "appwiz.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Console
KEYNAME "Control Panel\Don't Load"
VALUENAME "console.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Cpqmgt
KEYNAME "Control Panel\Don't Load"
VALUENAME "cpqmgmt.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_DevApps
KEYNAME "Control Panel\Don't Load"
VALUENAME "devapps.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Inetcpl
KEYNAME "Control Panel\Don't Load"
VALUENAME "inetcpl.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Intl
KEYNAME "Control Panel\Don't Load"
VALUENAME "intl.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Joy
KEYNAME "Control Panel\Don't Load"
VALUENAME "Joy.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_License
KEYNAME "Control Panel\Don't Load"
VALUENAME "liccpa.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Main
KEYNAME "Control Panel\Don't Load"
VALUENAME "main.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_MonAgt
KEYNAME "Control Panel\Don't Load"
VALUENAME "bhctrl.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_MMsys
KEYNAME "Control Panel\Don't Load"
VALUENAME "mmsys.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Modem
KEYNAME "Control Panel\Don't Load"
VALUENAME "modem.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_NCPA
KEYNAME "Control Panel\Don't Load"
VALUENAME "ncpa.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_ODBC
KEYNAME "Control Panel\Don't Load"
VALUENAME "odbccp32.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Ports
KEYNAME "Control Panel\Don't Load"
VALUENAME "Ports.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Server
KEYNAME "Control Panel\Don't Load"
VALUENAME "srvmgr.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_System
KEYNAME "Control Panel\Don't Load"
VALUENAME "sysdm.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Telephony
KEYNAME "Control Panel\Don't Load"
VALUENAME "telephon.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_Timedate
KEYNAME "Control Panel\Don't Load"
VALUENAME "timedate.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

POLICY !!CPL_UPS
KEYNAME "Control Panel\Don't Load"
VALUENAME "UPS.cpl"ValueOn !!CPL_Hide  ValueOff Numeric 0
END POLICY

END CATEGORY; Control Panel

[strings]
CPL_Icons="Control Panel Icons"
CPL_Access="Deny Access to Accessibility"
CPL_AppWiz="Deny Access to Add/Remove Programs"
CPL_Console="Deny Access to Console Properties"
CPL_Cpqmgt="Deny Access to Compaq Insight Agents"
CPL_DevApps="Deny Access to PC Card"
CPL_Inetcpl="Deny Access to Internet"
CPL_Intl="Deny Access to Regional Settings"
CPL_Joy="Deny Access to Joystick"
CPL_License="Deny Access to Licensing"
CPL_Main="Deny Access to Fonts,Mouse,Keyboard,Printers"
CPL_MonAgt="Deny Access to Monitoring Agent"
CPL_MMSys="Deny Access to Multimedia"
CPL_Modem="Deny Access to Modem"
CPL_NCPA="Deny Access to Network"
CPL_ODBC="Deny Access to ODBC"
CPL_Ports="Deny Access to Ports"
CPL_Server="Deny Access to Server"
CPL_System="Deny Access to System"
CPL_Telephony="Deny Access to Telephony"
CPL_TimeDate="Deny Access to Date/Time"
CPL_UPS="Deny Access to UPS"
CPL_Hide ="No" 



3. Click File, click Save As, type Cpanel.adm, and then click Save.

1. Copy the Cpanel.adm file to the %<SystemRoot>%\Inf folder.



2. Click Start, click Run, type POLEDIT, and then click OK. Click Options, click Policy Template, click to select the Cpanel.adm file, and then click OK.



3. Click File, click New Policy, and then double-click the icon representing the user name for which you want to prevent the icon display.



4. Double-click Control Panel Icons, click to select the check box for the individual icon entries to prevent their on-screen display, and then click OK.



5. Click File, click Save, type a name for the new policy, and then click Save.

Q168579 How to Set Up Locally-Based System Policies

Additional query words:

Keywords : kbenv ntdomain ntsecurity kbEnableMove kbEnableLearn
Version : winnt:4.0
Platform : winnt
Issue type : kbinfo