Disable Task Manager
Prevents users from opening Task Manager, so they cannot view processes, end tasks or change startup apps. The taskbar shortcut to it is greyed out as well.
Advanced Protection
Deep-system controls for hardened fleets: Group Policy, Task Manager, Defender, services, drivers and more.
37 features
Disable Lock Computer
Disables Win+L and the Start menu Lock entry so the user cannot manually lock the workstation. Auto-lock from screensaver or idle timeout still works.
Hide This PC
Hides the 'This PC' icon from the desktop, the Explorer sidebar and the Start menu so users can't browse drives from the My Computer entry point.
Disable Remote Desktop
Refuses incoming Remote Desktop connections to this PC and disables the matching Windows Firewall rule, so the machine cannot be reached over Remote Desktop.
Disable System Properties
Blocks access to System Properties so users cannot view the computer name, change the workgroup or open System Protection.
Disable Computer Management
Locks down the Microsoft Management Console so administrative consoles such as Services, Device Manager and Group Policy refuse to open.
Disable Run as Administrator
Removes the 'Run as administrator' verb from right-click menus so users cannot launch any program elevated, even with the local Admin password.
Disable Group Policy
Prevents users from viewing or refreshing local Group Policy. Domain policy from your servers still applies normally.
Disable Windows Install - New Software Setup Block
Blocks Windows Installer packages from installing, repairing or removing software on this PC. Already-installed software keeps working; only new changes are blocked.
Disable Clipboard
Disables the Windows clipboard so Ctrl+C / Ctrl+V / Ctrl+X copy nothing between apps. A background guardian also clears the clipboard on every paste attempt.
Disable Delete Button
Suppresses the Delete key in Explorer and removes the right-click → Delete entry so users cannot remove files from the desktop, Documents or any folder.
Disable Personalize
Blocks the right-click → Personalize entry on the desktop and the Settings → Personalization page so users cannot change theme, colors or background.
Disable Display Settings
Hides the right-click → Display Settings entry and blocks the Settings → System → Display page so users cannot change resolution, scaling or multi-monitor layout.
Disable Cut
Disables the Ctrl+X hotkey and removes the right-click → Cut entry in Explorer so users cannot move files by cutting them out of a folder.
Disable Copy
Disables the Ctrl+C hotkey and removes the right-click → Copy entry in Explorer so users cannot duplicate files to another location.
Disable Right Click
Disables the right-click context menu on the desktop, in Explorer, and on the taskbar so users cannot reach New / Properties / Send To / Open With.
Disable Right Click Properties
Greys out the 'Properties' entry on right-click menus for files, folders and shortcuts so users cannot view or change permissions, attributes or compatibility settings.
Block Devices and Printers
Hides Devices and Printers from Control Panel and the Settings → Bluetooth & devices page so users cannot add, remove or reconfigure printers, scanners or paired devices.
Disable Microphone
Forces the Windows microphone privacy switch to OFF for ALL apps (Win32 + UWP) so no application - including Teams, Zoom or the browser - can record audio.
Disable Camera
Forces the Windows camera privacy switch to OFF for ALL apps (Win32 + UWP) so no application - including Teams, Zoom or the browser - can capture video.
Disable Windows Notifications
Turns off the Action Center and toast notifications for every app so users don't see banners, sounds or badge counts. App-internal in-window alerts still appear.
Disable Snipping Tool
Prevents the Snipping Tool and the Win+Shift+S screenshot overlay from launching.
Disable Photos App
Prevents the Windows Photos app from launching. Image files opened from File Explorer fall back to whatever other viewer is associated.
Disable Sticky Notes
Prevents the Sticky Notes app from launching. Notes already synced to the cloud remain available on the user's other devices.
Disable Voice Recorder
Prevents the Windows Voice Recorder app from launching. Other apps can still record audio unless the microphone is also blocked.
Disable Airplane Mode
Hides the Airplane Mode toggle from Settings (Network & Internet → Airplane mode) and from the Action Center quick-action flyout. Also forces the radios back on so a device already in airplane mode is brought back online.
Disable Mobile Hotspot
Stops the Windows Mobile Hotspot Service, hides the Mobile hotspot Settings page and the Action Center quick-action, and blocks the Internet Connection Sharing / Mobile Hotspot UI.
Disable Nearby Sharing
Disables the Connected Devices Platform so Nearby Sharing and 'Continue on PC' cannot push files or URLs to other devices over Bluetooth / Wi-Fi-Direct.
Disable Project (Project to this PC)
Blocks 'Project to this PC' (the Miracast wireless-display receiver) and hides Settings → System → Projecting to this PC.
Disable VPN
Turns off the built-in Windows VPN so the PC refuses to start new VPN connections and drops any active one, covering all of the standard VPN types.
Disable Notepad
Blocks Notepad so it fails to launch from the Start menu, the Run box or by opening a text file, while leaving all other apps working. Turning the feature off restores Notepad.
Disable Audio
Disables the entire Windows audio stack at the service level.
Disable Switch User
Hides the 'Switch user' option on the lock screen and Start menu so a logged-in user cannot park their session and let another local account sign in alongside it.
Black Out Lock Screen
Replaces the lock-screen image with solid black so on-screen content can't be photographed while the PC is locked.
Block Unsigned EXE & MSI
Uses built-in Windows signing policies to stop unsigned programs and installers from running, without the brick-risk of full app allow-listing.
Force Auto-Lock After 5 min Idle
Automatically locks the PC after five minutes of inactivity and requires the password to resume.
Disable Format Option
Blocks drive formatting from the right-click menu and the command line so disks can't be wiped by accident or on purpose.