System policies module is an extension with functionality similar to Poledit program - it can disable Control Panel items, DOS applications, registry editor, etc). The policies are set every time computer boots, so that users cannot remove them.