1, hold down the win key +r Open run (Win key is CTRL and ALT, there is a circle, four box that), input: Gpedit.msc, press ENTER to open the Group Policy Editor,
2, open the Group Policy Editor window, expand the user configuration → administrative templates → Control Panel directory in the left pane, and select the Add or Remove Programs option. Then in the right pane, the delete Add or Remove Programs program policy is set to Enabled. This allows the user to double-click the Add or Remove Programs icon in Control Panel, and the system blocks the action and pops up a warning message, as shown in the figure.
Prohibit the use of the Add or Remove Programs feature
The user can enable the "Hide Add New Program" page, "Hide ' Add programs from CD-ROM or floppy ' option", "Hide ' Add programs from the network" option, and so on to achieve the protection function of each function module
Now there are a lot of configured policy files now, as long as the import is OK.