We have a windows 2008 server and windows 7 clients. I want to allow users to change mouse properties…pointers, pointer trail, etc…
But I don’t want them to have any other Control Panel capabilities.
I copied an existing GPO and changed the following settings.
“Prohibit access to the Control Panel” set to “Not configured”
“Show only specified Control Panel items” set to “Enabled” and Microsoft.Mouse added
“Force classic Control Panel view” set to “Enabled”
Now when I login with an account assigned that GPO I open Control Panel and only see the Mouse but when I try to launch it I get the “Restrictions” dialog box.
Another really confusing thing to me is I copied a GPO that doesn’t allow access to Control Panel, but when I change the “Prohibit access to the Control Panel” from Enabled to Not configured and do a gpupdate /force then logout and log back in, it doesn’t seem to have any change, meaning I can still open Control Panel even when this is enabled?!? I opened up both GPO’s side by side and did a stare and compare and even when these are identical things don’t work the same. The existing GPO restricts Control Panel access while the other does not??
Any ideas of what I might be doing wrong?
Thanks for help.
Randy