Application blocking for Control Panel and CMD

[Wahid Kinaan]

I'm using the following paths:

for control panel:

%systemroot%\system32\control.exe

%systemroot%\syswow64\control.exe

%windir%\system32\control.exe

%windir%\syswow64\control.exe

and still not blocking.

[Ivan de Mes]

Just as a check... what happens when you type in the full path without variables? For instance, "C:\Windows\System32\control.exe"?

[Ivan de Mes]

Not sure if you can block control.exe at all with DEM... 🧐

[Wahid Kinaan]

I used the full path you mentioned, but it doesn't work.

[Ivan de Mes]

Alright. One step back. What's the reason for completely blocking the control panel? Why don't you block (elements of) the control panel using ADMX-based settings or GPO?

Edited November 11 by Ivan de Mes

[hans straat]

With Windows 10 and also 11 you need a combination of both DEM and GPO's to disable visability and accessability of items in control panel. If you want to block the entire control panel you can do that within admx management in DEM. 
Personally i use admx-based settings in DEM in combination with a windows GPO because you have several items witch aren't managed by DEM. When blocking entire control panel i am sure people will start asking questions and your workload will go up 🙂

 

To block entirely see printscreen: