You have a public computer that runs Windows 7.
On the computer, you create two user accounts named Admin1 and User1. Admin1 is a member of
the Administration group, User1 is a member of the Users group.
You need to configure the computer to meet the following requirements:
• Allow Admin1 full access to Control Panel.
• Prevent User1 from accessing the Control Panel.
What should you do?
A.
Create a new local Group Policy object (GPO) linked to the Admin1 account. From User
Configuration set Prohibit Access to Control Panel.
B.
Create a new local Group Policy object (GPO) linked to the User1 account. From User
Configuration, set Prohibit Access to Control Panel.
C.
From Local Security Policy, set System objects: Strengthen default permissions of internal system
objects (e.g., Symbolic Links) to Enabled and set User Account Control: Admin Approval Mode for the
Built-in Administrator account to Disabled.
D.
From Local Security Policy, set System objects: Strengthen default permissions of internal system
objects (e.g., Symbolic Links) to Disabled and set User Account Control: Admin Approval Mode for
the Builtin Administrator account to Enabled.
Explanation:
Group Policy Settings for Control Panel
There are several Group Policy settings that control the behavior of Control Panel in Windows 7. The
full path of this node in the Group Policy Management Console is: User Configuration\Administrative
Templates\Control Panel
Prohibit access to the Control Panel
This policy setting allows you to disable all Control Panel programs.
If you enable this policy setting, you prevent Control.exe from starting. As a result, users cannot start
Control Panel or run any Control Panel items. It also removes Control Panel from the Start menu,
and it removes the Control Panel folder from Windows Explorer. If users try to select a Control Panel
item from the Properties menu, a message appears that explains a policy setting prevents the action.