HOWTO: 通过 GPO 限制访问 Windows 设置
Windows 控制面板一直以来都是作为设置 Windows 系统选项的重要入口，但随着 Windows 系统的不断发展它正被被全新的 Windows “设置”所替代。如果你正在使用 Windows 10 v1703 会发现进入控制面板已经变得“不那么容易”，以往通过右键单击开始图标已经再也找不到控制面板的踪影，取而代之的是“设置”。使用新的“设置”面板可以直接从命令行直接进行调用，例如在运行中输入“ms-settings:”或“ms-settings:batterysaver”，而且新的“设置”也满足了统一架构的需求，试想同一 Windows 核心的移动端系统是使用传统的控制面板方便，还是全新的“设置”方便呢？结果一目了然！
在对“设置”有了大致的了解后，下面就要分享本文的重点，Windows 10 的增长速度有目共睹，昨晚的 Build 2017 大会上公布的最新数据显示全球已有5亿的 Windows 10 用户，而企业环境中的占有率也在不断上升，对于 Windows ITer 的挑战之一，在部署 Windows 10 后如何按照合规性要求来限制用户访问新的 Windows 设置呢？！
非常有价值的问题，而该问题已有了解决方案，利用 GPO 的“设置页面可见性”就可以轻松的实现。该设置位于“计算机配置”-“管理模板”-“控制面板”，提供了两种设置模式：showonly - 只显示指定的设置；hide - 隐藏指定的设置。
例如 gOxiA 为“设置页面可见性”添加“showonly:bluetooth”，那么 Windows 所有设置中将仅保留“设备”设置，如下图所示（PS：截图环境为英文）：
现在已经知道如何通过 GPO 来限制访问 Windows 设置，那么每项设置具体对应的名称可从微软官方网站获取：https://docs.microsoft.com/en-us/windows/uwp/launch-resume/launch-settings-app，为了方便查询，也单独copy了一份在文末。
| Category | Settings page | Supported SKUs | URI |
|---|---|---|---|
| Home page | Landing page for Settings | Both | ms-settings: |
| System | Display | Both | ms-settings:screenrotation |
| Notifications & actions | Both | ms-settings:notifications | |
| Phone | Mobile only | ms-settings:phone | |
| Messaging | Mobile only | ms-settings:messaging | |
| Battery Saver | Both Only available on devices that have a battery, such as a tablet | ms-settings:batterysaver | |
| Battery use | Both Only available on devices that have a battery, such as a tablet | ms-settings:batterysaver-usagedetails | |
| Power & sleep | Desktop only | ms-settings:powersleep | |
| About | Both | ms-settings:about | |
| Encryption | Both | ms-settings:deviceencryption | |
| Offline Maps | Both | ms-settings:maps | |
| Devices | Default camera | Mobile only | ms-settings:camera |
| Bluetooth | Both | ms-settings:bluetooth | |
| Connected Devices | Desktop only | ms-settings:connecteddevices | |
| Mouse & touchpad | Both Touchpad settings only available on devices that have a touchpad | ms-settings:mousetouchpad | |
| Network & Wireless | NFC | Both | ms-settings:nfctransactions |
| Wi-Fi | Both | ms-settings:network-wifi | |
| Airplane mode | Both | ms-settings:network-airplanemode | |
| Network & Internet | Data usage | Both | ms-settings:datausage |
| Cellular & SIM | Both | ms-settings:network-cellular | |
| Mobile hotspot | Both | ms-settings:network-mobilehotspot | |
| Proxy | Desktop only | ms-settings:network-proxy | |
| Status | Desktop only | ms-settings:network-status | |
| Personalization | Personalization (category) | Both | ms-settings:personalization |
| Background | Desktop only | ms-settings:personalization-background | |
| Colors | Both | ms-settings:personalization-colors | |
| Sounds | Mobile only | ms-settings:sounds | |
| Lock screen | Both | ms-settings:lockscreen | |
| Accounts | Access work or school | Both | ms-settings:workplace |
| Email & app accounts | Both | ms-settings:emailandaccounts | |
| Family & other people | Both | ms-settings:otherusers | |
| Sign-in options | Both | ms-settings:signinoptions | |
| Sync your settings | Both | ms-settings:sync | |
| Other people | Both | ms-settings:otherusers | |
| Your info | Both | ms-settings:yourinfo | |
| Time and language | Date & time | Both | ms-settings:dateandtime |
| Region & language | Desktop only | ms-settings:regionlanguage | |
| Ease of Access | Narrator | Both | ms-settings:easeofaccess-narrator |
| Magnifier | Both | ms-settings:easeofaccess-magnifier | |
| High contrast | Both | ms-settings:easeofaccess-highcontrast | |
| Closed captions | Both | ms-settings:easeofaccess-closedcaptioning | |
| Keyboard | Both | ms-settings:easeofaccess-keyboard | |
| Mouse | Both | ms-settings:easeofaccess-mouse | |
| Other options | Both | ms-settings:easeofaccess-otheroptions | |
| Privacy | Location | Both | ms-settings:privacy-location |
| Camera | Both | ms-settings:privacy-webcam | |
| Microphone | Both | ms-settings:privacy-microphone | |
| Motion | Both | ms-settings:privacy-motion | |
| Speech, inking & typing | Both | ms-settings:privacy-speechtyping | |
| Account info | Both | ms-settings:privacy-accountinfo | |
| Contacts | Both | ms-settings:privacy-contacts | |
| Calendar | Both | ms-settings:privacy-calendar | |
| Call history | Both | ms-settings:privacy-callhistory | |
| Both | ms-settings:privacy-email | ||
| Messaging | Both | ms-settings:privacy-messaging | |
| Radios | Both | ms-settings:privacy-radios | |
| Background Apps | Both | ms-settings:privacy-backgroundapps | |
| Other devices | Both | ms-settings:privacy-customdevices | |
| Feedback & diagnostics | Both | ms-settings:privacy-feedback | |
| Update & security | For developers | Both | ms-settings:developers |
