GPO

Prohibit access to Control Panel and PC settings

Disable GPO for Administrators and /or User Groups 

 Custom wallpaper

 Account lockout and security policies