You have a standalone computer that runs Windows 7. You need to prevent non-administrative users from using Device Manager. Users must be able to access Event Viewer.
What should you do?

A.
From Control Panel, modify the default settings for media and devices.

B.
From Control Panel, modify the default settings for device installation.

C.
From the local computer policy, modify the application control policies.

D.
From the local computer policy, modify the Microsoft Management Console (MMC) settings.

Explanation:
Controlling MMC usage by using local Group Policy
To control MMC usage by using local Group Policy
11. Open MMC 3.0.
12. On the File menu, click Add/Remove Snap-in.
13. In the Available snap-ins list, click the Group Policy editor, and then click Add.
14. In the Select Group Policy Object wizard, use the default setting, Local Computer, in the Group Policy Object field.
15. Click Finish to close the Select Group Policy Object wizard.
16. By default, all available snap-in extensions are enabled. If you want to enable only certain extensions, highlight the snap-in in the Selected snap-ins list, and then click Edit Extensions.
17. By default, snap-ins load as child objects of the Console Root node. Click Advanced to modify this behavior and allow you to choose a different parent snap-in.
18. In the Add or Remove Snap-ins dialog box, click OK.
19. Before closing the new console, perform any of these procedures:
– To restrict access to author mode in MMC
– To restrict access to a permitted list of snap-ins
– To permit or restrict access to a snap-in