Locking down the Start Menu sub-folders

Posted on 2004-07-31
Last Modified: 2010-04-13

Please can someone tell me the easiest way to lock down the Start Menu on a Windows 2000 Terminal Server (running Citrix), so that users cannot reorganise the order of the applications listed under sub-folders of the 'Programs' menu.

Asking them to right click and sort is not an option, and ideally it needs to be a native Windows solution (i.e. not a third party utility) and effective immediately (i.e. they cannot move items when they try, rather than any changes being reset after they log off).


Question by:Mark_R
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
LVL 20

Accepted Solution

Debsyl99 earned 50 total points
ID: 11684369

Try the following: (although I don't know how it pans out with citrix so if I'm missing the point forgive me)

Create a new OU in AD users and computers. Add a new group policy to it - then edit the group policy.
In User Configuration->ADministrative Templates>Start Menu and Taskbar enable the following:

Disable drag and drop context menus on the start menu
Disable changes to the taskbar and start menu settings
Disable contect menus for the taskbar

Add your TS users to the new ou. From a command prompt on the server type     secedit /refreshpolicy user_policy  wait a couple of minutes (or long enough for the policy to be applied, then test it,

Hope that helps

LVL 85

Expert Comment

ID: 11685499
If you're running Citrix anywy, why do you publish the desktop at all? Publish the applications instead and let your users pick them from the Citrix client.

Author Comment

ID: 11691603
Debsyl99 - Cheers, I will see if I can get that sorted.  I should have said that I ideally wanted to avoid using GPOs too, as I think I may encounter some resistance from the AD Admins, but I will try anyway.

oBdA - If I had my way, I would do!!  Sadly, I did not have any say in configuration of the Citrix farm, as it was decided before I began work on the project (I am a contractor).
Transaction Monitoring Vs. Real User Monitoring

Synthetic Transaction Monitoring Vs. Real User Monitoring: When To Use Each Approach? In this article, we will discuss two major monitoring approaches: Synthetic Transaction and Real User Monitoring.


Expert Comment

ID: 11698204
we used to use a win progy called "poledit" i dont know it will work on 2k its worth a try and its from microsoft.
LVL 20

Expert Comment

ID: 11698304

It should work - just don't add your AD admins to that OU if you don't need to. Make sure though that you enable read and apply group policy permissions for authenticated users in the property - security settings on the policy applied to the ou,

Deb :))

Author Comment

ID: 11734232
Just an update so that nobody is left wondering what's going on..........I will ask for the changes to be made as per Deb's first post, but this will not take place until next week at least (due to the current status of the system it affects, and the change request mechanisms in place here).

When I have the result, I will post the info/accept an answer.



Featured Post

On Demand Webinar: Networking for the Cloud Era

Did you know SD-WANs can improve network connectivity? Check out this webinar to learn how an SD-WAN simplified, one-click tool can help you migrate and manage data in the cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
In this blog we highlight approaches to managed security as a service.  We also look into ConnectWise’s value in aiding MSPs’ security management and indicate why critical alerting is a necessary integration.
NetCrunch network monitor is a highly extensive platform for network monitoring and alert generation. In this video you'll see a live demo of NetCrunch with most notable features explained in a walk-through manner. You'll also get to know the philos…
If you’ve ever visited a web page and noticed a cool font that you really liked the look of, but couldn’t figure out which font it was so that you could use it for your own work, then this video is for you! In this Micro Tutorial, you'll learn yo…

696 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question