In a domain-joined networked environment, we always need to restrict users’ access to most PC settings and resources. It is necessary to do so for security and safety reasons. One crucial restriction that we always need to apply is to deny users access to PC Settings and Control Panel. And that is what this article is about. More specifically, this article covers the detailed steps to preventing users’ access to the Control Panel and PC Settings using Group Policy on Windows Server 2022.

In our example, our domain controller machine runs Windows Server 2022, on which we create the group policy. We create an Organization Unit (OU) level group policy directly on the (OU) that contains the users to which we apply the policy.

You may also like to read Install Active Directory On Windows Server 2022 Using PowerShell.

Steps to Deny Access to PC Settings and Control Panel

As we described in the scenario earlier, we create the policy that is linked to an OU, which contains the users to which we apply the restriction. We can create the group policy first and link that to the OU, or we can create the group policy directly on the OU. Either way ends up with the same result. However, we go with the second approach in our example. That being said, let’s go with the steps.

1. Press down the Windows key + R keys on your keyboard to open the Run dialogue box.
2. Type in gpmc.msc and press Enter to open the Group Policy Management console.

3. Right-click on the OU to which you want to associate the group policy. Then, select Create a GPO in this domain,… option.

4. Put a name for the Group Policy Object (GPO) in the relevant box, and click OK.

5. Once the GPO is created, right-click on it, and select Edit from the context menu.

6. On the Group Policy Management Editor window, expand Policies under User Configuration. Then, expand the Administrative Template and click on Control Panel. Finally, double-click on Prohibit access to Control Panel and PC settings.

7. On the configuration window, check the Enabled option. Then, click OK, and close the Group Policy Management Editor window.

To this end, we have created the group policy to prevent users’ access to the Control Panel and PC settings. We created it directly linked to the OU that contains user accounts that we want to restrict. So, it is all done. To verify it, go with the next section.

Verifying the Above Group Policy Configuration

To check the above restriction, we need to log in with a user account that is a member of the OU to which we linked the group policy. Then, we update the group policy and try to open the Control Panel and PC Settings. See the below steps.

1. Login to the client’s computer with a user account that is a member of the OU to which you linked the restriction.
2. Run gpupdate /force in the Run dialog box to perform group policy updates. Wait for a while until the group policy completes.

3. Once the group policy gets updated, try to open the Control Panel or PC Settings. It doesn’t open, and you will face the pop-up window shown in the below pic.

That is all we need to do to check how the restriction we configured works and if it is applied correctly.

Conclusion

It is a common setting in a domain environment to deny users access to the Control Panel and PC settings. It is essential for security and safety reasons. As the steps discussed above, we can apply this restriction simply by defining and configuring a group policy object to an OU that contains the target users.

In the end, I hope you found this article helpful. Do not hesitate to share your thoughts and queries in the comment section.

The post Deny Users Access to PC Settings and Control Panel using Group Policy appeared first on TECHNIG.

System admins have the ability to prevent/block users’ access to all removable storage media drives. Such restrictions play an important role in the security and safety of a networked environment. And they are very common and most often used inside almost all organizations. Additionally, the tool that helps us create such restrictions is the Group Policy Management Console (GPMC). It is a feature that we add along with the AD DS role installation. That all being said, this article covers a step-by-step guide to preventing domain-joined users’ access to removable storage media drives using group policy in Windows Server 2022.

In our example, the domain controller machine runs Windows Server 2022 Standard. Additionally, we define the group policy directly on an Organizational Unit (OU) that contains the target users. So, we have already created an OU and moved the target user(s) into it.

You may also like to read DNS Server Guides and DHCP Server Articles.

Steps to Prevent Access to Removable Media

With the above scenario in mind, it is a straightforward process to prevent users’ access to removable media.

1. Press down the Windows Key + R on your keyboard. It opens the Run dialogue box.
2. Type in gpmc.msc and press the enter. It opens the Group Policy Management (GPM) console.

3. On the group policy management console, right-click on the OU that contains the target users. Then, select Create a GPO… from the context menu.

4. Type a name for the new GPO. Then, click OK to continue.

5. Right-click on the GPO that you created. Then, select Edit from the context menu.

6. On the GPM Editor window, expand User Configuration -> Administrative Templates -> System. Then, select the Removable Storage Access folder as shown in the below picture. Finally, double-click on All Removable Storage classes: Deny all access.

7. On the GPO configuration window, check the Enabled option. Then, click OK and close the GPM Editor window.

8. The GPO configuration is all set throughout the previous steps. However, it will affect only after we perform a group policy update on the client machine or restart it. So, to perform a group policy update, use gpupdate /force the Command Prompt or Run dialogue box.

9. Now, if you insert a removable media like a USB drive and try to open it, you will face an error saying the media is not accessible.

That is all with the steps to deny users access to removable storage media using group policy.

Conclusion

To conclude this article, first, we talked about the importance of restricting users’ access and discussed the Group Policy Management tool. Then, we briefly introduced our scenario. Lastly, we covered detailed steps to prevent users’ access to removable storage media.

In the end, as always, I hope you find this article helpful. And feel free to share your thoughts and queries in the comment section.

The post How to Prevent Access to Removable Storage Media Using Group Policy? appeared first on TECHNIG.