How can I restrict user access to the Internet Options Control Panel applet in Windows XP and Windows 2000 or to the Internet Tools Control Panel applet in Windows NT without using policies?

A. If you use NTFS, you can use the file system's built-in permissions to restrict access to the Internet Options or Internet Tools Control Panel applet by performing the following steps:

1. Start Windows Explorer.
2. Navigate to \%systemroot%\system32 (e.g., c:\windows\system32).
3. Right-click inetcpl.cpl and select Properties from the context menu.
4. Select the Security tab.
5. Adjust the user and group permissions as appropriate, and ensure that the SYSTEM group has Full Control.

You can also use the standard command-line permissions utility Cacls.exe to set these permissions. However, be aware that when you use either method to restrict access, another administrator will have a difficult time determining the permissions you've set. Therefore, using policies is the preferred method for restricting access.