Disable programs on Settings menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar
Prevents Control Panel, Printers, and Network and Dial-up Connections from running.
This policy removes the Control Panel, Printers, and Network and Dial-up Connection folders from Settings on the Start menu, and from My Computer and Windows Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running.
However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to start Display or right-clicking My Computer to start System.
This policy also disables other folders in Control Panel, such as Fonts and Scheduled Tasks. (The Explain tab in Group Policy fails to mention this feature.)