Is there a way to restrict control panel access to specific users on Windows 2008 R2?
I have only found a way to prohibit access to all limited users in group policy, but not a way to do it for specific users only.
You should be able to do it with GPO Security Filtering. Create a group for the users that you want to deny access to the Control Panel and add the appropriate users to the group. Create a GPO with the appropriate settings and link it to the OU where the user objects are (or to the domain if the users are in the default Users container), set the Security Filtering on the GPO to apply to only this group (and remove Authenticated Users).