sodcalculator

10 Tech How-To

Disable Access to Settings in Windows

Guide 10-36488 · Updated · Step by step

This guide shows you how to block access to the Windows Settings app and the classic Control Panel, which is useful for parents, IT admins, or anyone sharing a PC who wants to prevent others from changing system options like Wi-Fi, display, or user accounts. You can do this using the built-in Group Policy Editor (Windows Pro and Enterprise) or the Registry Editor (all editions). The steps below are for Windows 10 and Windows 11.

What You’ll Need

  • A Windows account with administrator privileges.
  • Windows 10/11 Pro, Enterprise, or Education for the Group Policy method. If you have Windows Home, use the Registry method.
  • For the Registry method, a backup of your registry (File > Export) is strongly recommended.

Step-by-Step

Method 1: Using Group Policy Editor (Pro/Enterprise)

  1. Press Win + R, type gpedit.msc, and press Enter. If the command is not recognized, you are on Windows Home and should use Method 2.
  2. Navigate to Computer Configuration > Administrative Templates > Control Panel.
  3. In the right pane, double-click Prohibit access to Control Panel and PC settings.
  4. Select Enabled, then click OK.
  5. Close the Group Policy Editor. The change takes effect immediately, but you can force a refresh by running gpupdate /force in Command Prompt (Admin).

Method 2: Using Registry Editor (All editions)

  1. Press Win + R, type regedit, and press Enter. Click Yes when prompted by User Account Control.
  2. Navigate to the following key:
    HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer
  3. If the Explorer key does not exist, right-click on Policies, select New > Key, and name it Explorer.
  4. Right-click in the right pane, select New > DWORD (32-bit) Value, and name it NoControlPanel.
  5. Double-click NoControlPanel, set the value data to 1, and click OK.
  6. Close the Registry Editor and restart Explorer or sign out and back in for the change to apply.

Verifying the block

  1. Try opening Settings (Win + I) or Control Panel. You should see a message: “This operation has been cancelled due to restrictions in effect on this computer.”
  2. Note that the Settings app may still open briefly before closing. This is normal.

Common Mistakes

  • Using the wrong policy path: The policy is under Control Panel, not under System or Windows Components. Double-check the path.
  • Editing the wrong registry hive: The setting must be in HKEY_CURRENT_USER. Putting it in HKEY_LOCAL_MACHINE will not work for the current user unless you also create the same key under HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Explorer.
  • Not restarting Explorer: The registry change may not take effect until Explorer is restarted. Use Task Manager to restart it or simply sign out and back in.
  • Forgetting to set the value to 1: A value of 0 means the policy is disabled. Make sure the DWORD is exactly 1.
  • Applying to the wrong user: The registry key under HKEY_CURRENT_USER only affects the currently logged-in user. If you want to affect all users, you need to edit the corresponding key under HKEY_LOCAL_MACHINE (which requires admin rights and may not work on all editions).

Tips

  • Use Group Policy if available: It is easier to manage and revert than the registry.
  • Create a restore point before making changes, especially if you are editing the registry. This lets you roll back if something goes wrong.
  • Test with a standard user account: The block works for all users, but if you are using an admin account, you can still bypass it by holding Shift while right-clicking the Start button and selecting “Run as different user” (though this is not a simple workaround for most users).
  • To re-enable access: Set the policy to Not Configured or delete the NoControlPanel DWORD from the registry.
  • Combine with other policies: You can also disable the Settings page individually using Group Policy under Computer Configuration > Administrative Templates &em; Control Panel > Settings Page Visibility if you want to hide only certain pages, but that is more complex.

Troubleshooting

Settings still opens after applying the policy

  • Make sure you are not using a Windows Home edition with Group Policy. If you are, use the registry method.
  • Run gpupdate /force in an elevated Command Prompt to refresh Group Policy.
  • Restart the PC. Some settings require a full reboot.

Registry change does nothing

  • Verify the key path is correct. The most common mistake is missing the Explorer subkey.
  • Ensure the DWORD is named NoControlPanel (case-sensitive) and the value is 1.
  • Check if you are editing the correct user hive. If you are logged in as a different user, the change will not affect them.

You cannot open the Group Policy Editor

  • This tool is not available on Windows Home. Use the registry method instead.
  • If you are on Pro and it still says “not found”, ensure you typed gpedit.msc correctly and that you have admin rights.

You want to block Settings for a child account but not for yourself

  • Apply the policy/registry to the child’s user account only. For Group Policy, you can use the “Local Group Policy” on the child’s profile (not straightforward). The registry method works per user: log in as the child, edit the registry under HKEY_CURRENT_USER, and it will only affect that account.

Frequently Asked Questions

Q: Does this block the Settings app completely?
A: Yes, both the Settings app and the Control Panel will show an error message when opened. The Settings app may flash briefly before closing.

Q: Can I still open Settings from the Start menu or with Win+I?
A: No, all methods of opening Settings are blocked, including keyboard shortcuts and the Start menu shortcut.

Q: Will this prevent users from changing the wallpaper or display settings?
A: Yes, they will not be able to access the Settings pages where those options live. However, they could still right-click the desktop and choose “Personalize” — that opens a limited Settings page that may still be blocked. To fully block personalization, you need additional policies.

Q: How do I undo the block?
A: For Group Policy, set the policy to “Not Configured” or “Disabled” and run gpupdate /force. For the registry, delete the NoControlPanel DWORD and restart Explorer.

Q: Does this work on Windows 11?
A: Yes, the same Group Policy and registry entries work on Windows 11, though the Settings app layout is different.

Q: Can I block only specific Settings pages, like Wi-Fi or Accounts?
A: Yes, Group Policy has a “Settings Page Visibility” policy that lets you hide specific pages. The registry method described here blocks all pages.

Related

General steps for current mainstream versions; menus can differ by device and version. See the disclaimer or report an error.

More in this bed

The whole Tech How-To bed →