Restrictions

243 individual lockdown toggles across 16 protection surfaces. Each restriction has an on/off state visible in the CtrlOne policy panel.

Basic Protection

15 restrictions - Day-one defaults that block the obvious holes - Registry Editor, Control Panel, Windows Update, shortcuts.

Advanced Protection

37 restrictions - Deep-system controls for hardened fleets: Group Policy, Task Manager, Defender, services, drivers and more.

Desktop Protection

17 restrictions - Lock down what users can do on the desktop - wallpaper, icons, themes, right-click and personalisation.

USB Protection

5 restrictions - Per-class USB control - allow keyboards / mice / printers while blocking storage, cameras, MTP or HID. Three-mode mass-storage lockdown (off / read-only / block).

Software Block Protection

36 restrictions - Block specific apps, installers, file types and tools from launching on the PC by name and signature.

Control Panel Protection

38 restrictions - Hide individual Control Panel applets so users can see what they need and nothing else.

Browser Protection

13 restrictions - Browser-engine-level controls (Chrome, Edge, Firefox) - Incognito, Extensions, DevTools, downloads.

Start Menu Protection

4 restrictions - Trim the Start menu - Run, Search, Power, recent items - for kiosk and shared-PC scenarios.

Function Keys Protection

12 restrictions - Disable F1-F12 system shortcuts and the function-key combos that bypass restrictions.

Hot Keys

6 restrictions - Block Win-key and Ctrl/Alt combos at the driver level so they can't be used to escape lockdown.

Remote Application Block Protection

12 restrictions - Block AnyDesk, RustDesk, UltraViewer and other remote-control tools that bypass corporate VPNs.

Attachment Block Protection

14 restrictions - Stop risky email attachments and downloaded executables from running on protected machines.

12 restrictions - Top-tier shields - tamper protection, ransomware storm detection, offline fail-closed, per-app time budgets, screen-time report card, disk / SMART early warning, webcam-mic notifier, HKLM hive signing, GUI crash watchdog and silent self-update.

Browser Hardening

10 restrictions - Harden Chrome, Edge and Firefox - turn off saved passwords, autofill, sync, history and the first-run import wizard.

Content Filter

12 restrictions - Category-based website blocking - adult, gambling, drugs, piracy, social, streaming, gaming and more, applied system-wide.