Windows 11 provides users with two primary interfaces for configuring their system: the modern “Settings” app and the legacy “Control Panel.” These interfaces allow users to change everything from network adapter configurations and firewall rules to desktop wallpapers and connected Bluetooth devices. In a tightly managed environment—such as a school computer lab, a public library kiosk, or a strictly regulated corporate workstation—granting standard users access to these configuration hubs is a recipe for disaster. Users can easily misconfigure the system, disconnect from the domain, or bypass security restrictions.
This guide explains how to completely disable access to both the Control Panel and the Settings app in Windows 11 using the Group Policy Editor, locking the system configuration down entirely.
Disable Settings and Control Panel via Group Policy
The Local Group Policy Editor provides a single, powerful toggle that simultaneously kills access to both the legacy Control Panel and the modern Settings app. Note that this tool is only available on Windows 11 Pro, Enterprise, and Education editions.
- Log into Windows 11 with an Administrator account.
- Press the Windows Key + R to open the Run dialogue box.
- Type
gpedit.mscand press Enter to launch the Local Group Policy Editor. - In the left-hand navigation pane, drill down to the following path:
User Configuration > Administrative Templates > Control Panel - With the “Control Panel” folder selected, look at the main pane on the right. Locate the policy named Prohibit access to Control Panel and PC settings.
- Double-click the policy to open its configuration window.
- Select the radio button next to Enabled.
- Click Apply, then click OK.
Verify the System Lockdown
Group Policy changes often apply instantly, but if they do not, you can force an update by opening a Command Prompt and running gpupdate /force.
Once active, the lockdown is absolute. If a user clicks the Start Menu and attempts to open the modern Settings app (the gear icon), the window will briefly flash on screen and instantly close itself. If they attempt to open the legacy Control Panel via search or the Run dialogue, they will receive a stern error message stating: “This operation has been cancelled due to restrictions in effect on this computer. Please contact your system administrator.”
Furthermore, all right-click context menu options that normally lead to settings (such as right-clicking the desktop and selecting “Personalize” or “Display settings”) will also be completely blocked and generate the same error message.