You have a public computer that runs Windows 7. On the computer, you create two user accounts named Admin1 and User1. Admin1 is a member of the Administrators group and User1 is a member of the Users group. You need to configure the computer to meet the following requirements:
* Allow Admin1 full access to Control Panel
* Prevent User1 from accessing Control Panel
What should you do?
A.
Create a new local Group Policy object (GPO) linked to the Admin1 account. From User Configuration, set Prohibit Access to Control Panel to Disabled.
B.
Create a new local Group Policy object (GPO) linked to the User1 account. From User Configuration, set Prohibit Access to Control Panel to Enabled.
C.
From Local Security Policy, set System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links) to Enabled and set User Account Control: Admin Approval Mode for the Built-in Administrator account to Disabled.
D.
From Local Security Policy, set System objects: Strengthen default permissions of internal system objects (e.g., Symbolic Links) to Disabled and set User Account Control: Admin Approval Mode for the Built-in Administrator account to Enabled.
Explanation:
Group Policy Settings for Control Panel
There are several Group Policy settings that control the behavior of Control Panel in Windows 7.
The full path of this node in the Group Policy Management Console is: User ConfigurationAdministrative TemplatesControl Panel
Prohibit access to the Control Panel
This policy setting allows you to disable all Control Panel programs.
If you enable this policy setting, you prevent Control.exe from starting. As a result, users cannot start Control Panel or run any Control Panel items. It also removes Control Panel from the Start menu, and it removes the Control Panel folder from Windows Explorer.
If users try to select a Control Panel item from the Properties menu, a message appears that explains a policy setting prevents the action.