Settings APP Lockdown

[ITGURU]

I have rolled out Windows 10 to approx 100 pcs so far and still finding open access areas.

 

One in particular is the 'Settings' app/screen.

 

There are so many areas in here that i'm finding are open to users.

 

I've discovered they can now go into the internet, proxy area and see the proxy server and also disable it.

 

How do I lock this down and other parts of 'settings'.

 

[Localtechie]

You are unable to Microsoft in their wisdom decided that there would be no GPO's to lock down settings as there is for the control panel.

 

As a result, we used app locker and blocked the app entirely.

 

Also, they can also factory reset the PC through the settings app so you may want to block it before the little darlings discover that!

[NicholasEsping]

You can do this through group policy pretty easily. User Configuration\Policies\Administrative Templates\Control Panel\Prohibit access to Control Panel and PC settings.

[lmrogers]

We too just block the settings app through AppLocker as well.

[Duke5A]

When setting up your Appx Rules don't blanket deny everything. The Start Menu is considered a modern app and will not work. This is my basic rule set. I preroll my images and removed all of the built-in apps beforehand.

 

Appx
Action User Name Rule Type Exceptions 
Deny Domain\All Students Microsoft.WindowsStore, from Microsoft Corporation Publisher No 
Deny Domain\All Students windows.immersivecontrolpanel, from Microsoft Corporation Publisher No 
Allow Everyone (Default Rule) All signed packaged apps Publisher No