And user can get access to IE config menu by other ways too. There is a menu on IE 6 (show-> privacy report i think - my IE 6 is in portuguese). You can go to configuration menu thru there. We cant find a way to block those on GPO.
But why u want to avoid that? for auditing purposes?

If you have a proxy, u can get the same info there.....