I'm having trouble with users changing aspects of their Windows 2000 workstations. Can I restrict access to Control Panel applets?
You can configure Group Policy to hide Control Panel applets. Open a registry editor, navigate to the HKEY_CURRENT USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer registry subkey, and add the REG_DWORD subkey RestrictCpl. To enable the policy, set the subkey's value to 1. (The subkey's default is 0, which disables the policy.) This policy also works in Windows XP. You can use other methods to accomplish the same thing, but this policy is the easiest to set and use.