🛠️ Group Policy (GPO) Configuration Guide 🛡️

5. 🎛️ Examples of GPO Settings

a. 🚫 Restrict access to Control Panel

🖥️ Graphical interface: User Configuration → Administrative Templates → Control Panel → Prohibit access to Control Panel and PC settings → Enabled

💻 PowerShell:

Set-GPRegistryValue -Name "Nom_de_votre_GPO" -Key "HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" -ValueName "NoControlPanel" -Type DWord -Value 1

b. 🔌 Restrict access to removable devices (USB drives, etc.)

🖥️ Graphical interface: User Configuration → Administrative Templates → System → Removable Storage Access → All Removable Storage classes: Deny all access → Enabled

💻 PowerShell:

Set-GPRegistryValue -Name "Nom_de_votre_GPO" -Key "HKCU\Software\Policies\Microsoft\Windows\RemovableStorageDevices" -ValueName "Deny_All" -Type DWord -Value 1

c. 🚫 Prevent users from installing software

🖥️ Graphical interface: Computer Configuration → Administrative Templates → Windows Components → Windows Installer → Prohibit User Installs → Enabled