crie prohibit-systemsettings.ps1 e defina taskSchedular por grouppolicy
Register-WmiEvent -Class win32_ProcessStartTrace -SourceIdentifier processStarted
while($true){
$newEvent = Wait-Event -SourceIdentifier processStarted
$x = Get-Process -Name SystemSettings -ErrorAction SilentlyContinue
if(!$x -eq $false){$x.Kill()}
Remove-Event processStarted
}