hi i create a Group policy object For my domain to block access to control panel it blocks it fine when i log on locally as a normal user but if i logon to the domain from another computer the control panel is not blocked how do i sort this?

Hi Ritrixx,

I would start with the forum FAQ about troubleshooting Group Policy issues. If you go through those steps and still have an issue, give some more detail on the settings you have configured, whether you have the GPO linked to an OU, domain, or site, whether you're using security filtering or blocking inheritance, etc.

[Forum FAQ] Common steps to start troubleshooting Group Policy application issues

Did you set a domain gpo or a local gpo? You specify domain but are your definite? Can we get a gpresult for the computer & user that doesn't get the block? Does the gpo apply to the second user that doesn't get blocked ie do they belong to the ou you linked? Is there any security filtering in place? Useful info http://technet.microsoft.com/en-us/library/ee617167(v=ws.10).aspx

• Proposed as answer by Zanderol24 Tuesday, February 25, 2014 12:57 PM

ive tested login locally and it blocks it so its working but if i login with the same account on another pc its not blockin it

Sounds like you have set a local security policy not a domain wide gpo. Paste a gpresult in here as requested

Hi Ritrixx,

As Zandero124 said, please tell us the GPO is local wide or doamin wide. If the GPO is local wide, its range of action is only the local computer or the user who is physically logging into the machine. If the GPO is domain wide, its range of action is the computers or the users  in the doamin or ou. In the meanwhile, please tell us the GPO is computer or user configuration to help us to do further troubleshooting.

Regards,

Lany Zhang

lany

isn't this policy user based User Configuration\Administrative Templates\Control Panel\prohibit access to  control panel, can you configure no control panel for computers?

I

Hi Zanderol24,

If you enable this policy setting, you prevent Control.exe from starting. As a result, users cannot start Control Panel or run any Control Panel items. It also removes Control Panel from the Start menu, and it removes the Control Panel folder from Windows Explorer.

Regards,

Lany Zhang

Thanks Lany. I would assume my answer is correct now as the OP hasnt responded