Disable Registry Editor
Prevents users from opening the Registry Editor or importing registry files, so low-level system settings cannot be changed.
Basic Protection
Day-one defaults that block the obvious holes - Registry Editor, Control Panel, Windows Update, shortcuts.
15 features
Right Click Display Settings
Hides the legacy Display Control Panel applet AND the modern Settings → System → Display / Personalization pages.
Disable Windows Update
Removes user access to Windows Update so they cannot pause, defer or trigger feature/quality updates. The update service itself keeps running.
Disable Control Panel
Removes access to Control Panel and all of its applets. The modern Settings app is left unaffected.
Disable shortcuts
Disables the Win key plus every Win+R/E/L/X/I/A/S/D/M/G/U shortcut combo, and remaps the physical Windows keys so they do nothing.
Disable New Shortcut wizard
Removes the 'Shortcut' option from the right-click New menu so users cannot create new shortcuts on the desktop or in folders.
Disable Programs and Features
Blocks the Add/Remove Programs and Programs and Features applets so users cannot uninstall, change or repair installed software.
Disable command prompt
Disables the Command Prompt and batch-script execution. Users see a clear 'command prompt has been disabled by your administrator' message.
Disable PowerShell
Prevents PowerShell - including the ISE editor and PowerShell 7 - from launching, and blocks PowerShell scripts from running.
Disable Run
Hides the Run command from the Start menu and disables the Win+R hotkey so users cannot launch arbitrary commands by name.
Disable Date & Time Change
Locks the system clock so users cannot change the date, time or time zone from the taskbar, Control Panel or Settings. The clock stays visible.
Disable Microsoft Store
Removes the Microsoft Store, blocks all store-delivered apps from running and stops background app updates from downloading.
Disable Services
Prevents users from starting, stopping or reconfiguring Windows services through any of the built-in tools, and hides the Administrative Tools shortcuts.
Disable Bluetooth
Stops the four core Bluetooth services AND disables every paired BT radio device via PnP - no pairing, file transfer or peripheral connections.
Disable Calculator
Stops the Windows Calculator from launching and closes it if it is already open.