A new GPO option in Windows 10 Creators Update allow administrators to hide specific Settings pages from end users. This ensures that end users aren’t capable of mucking around with things they shouldn’t and also helps avoid support calls where the end users swears they “didn’t do a thing.”
The new settings are only available for the Computer context and are located at:
Computer Configuration\Administrative Templates\Control Panel\Settings Page Visibility
This policy allows an administrator to block a given set of pages from the System Settings app. Blocked pages will not be visible in the app, and if all pages in a category are blocked the category will be hidden as well. Direct navigation to a blocked page via URI, context menu in Explorer or other means will result in the front page of Settings being shown instead.
This policy has two modes: it can either specify a list of settings pages to show or a list of pages to hide. To specify a list of pages to show, the policy string must begin with “showonly:” (without quotes), and to specify a list of pages to hide, it must begin with “hide:”. If a page in a showonly list would normally be hidden for other reasons (such as a missing hardware device), this policy will not force that page to appear. After this, the policy string must contain a semicolon-delimited list of settings page identifiers. The identifier for any given settings page is the published URI for that page, minus the “ms-settings:” protocol part.
Example: to specify that only the About and Bluetooth pages should be shown (their respective URIs are ms-settings:about and ms-settings:bluetooth) and all other pages hidden:
Example: to specify that only the Bluetooth page (which has URI ms-settings:bluetooth) should be hidden:
There’s a large table of Windows 10 Settings URIs available here: Launch the Windows Settings app
Looking for an awesome, no-nonsense technical conference for IT Pros, Developers, and DevOps? IT/Dev Connections kicks off in San Francisco in 2017!