Ideally this is done with a GPO
If you can find out what process calls the control panel than maybe you could block it with an application and device control policy but I can't see this being easy to implement as the same process may call other Windows files as well