So a little question here, as I'm full of questions lately...
I'm working on a Windows 7 image that will be only for certain areas in our workplace where all that is really needed is Internet, maybe Outlook and that's about it. The goal here has been to lock down the Control Panel, among other programs, which I succeeded in finally locating buried in the gpedit.msc thing. With Control Panel access prohibited, users could hardly do anything (users at this point being me, as I'm testing my own configuration), except surf the web. I've gotten it to the point where nothing can be installed, downloaded, or ran unless I explicitly allowed it in the security policies.
The Control Panel is what's bugging me though, because once prohibited, not even admin can access it. In order to get it back up, admin needs to navigate local group policy editor...