1. Use the shortcut key combination "win+r" to start running, enter "gpedit.msc" and press enter to confirm.

2. After opening the Local Group Policy Editor, click User Configuration in the left column, and then double-click the management module in the right column.

3. Double-click "Control Panel" in the right column.

4. Double-click the "No Access to Control Panel" option.

5. Select Enable in the upper left corner, click OK to save and exit.

Through the above settings, you can find that there is no control panel option in the start menu, and access has been banned.