Obviously you don't want all users to be able to access every item inside of the Control Panel.
So in Group Policy you can set which items are visible/hidden. To do this in GP go to: "User Configuration" > "Policies" > "Administrative Templates" > "Control Panel"
Edit the policy with the Canonical names of the C Panel items.
http://msdn.microsoft.com/en-us/library/windows/desktop/ee330741(v=vs.85).aspx
The format from what I have seen is:
Default windows items have "Microsoft." at the start and no spaces in the name. For example "Microsoft.WindowsFirewall"
For everything else it is it's name as seen in the C Panel. For example "Configuration Manager" or "Mail"