[Okta Webinar] Learn how to a build a cloud-first strategyRegister Now

  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 12871
  • Last Modified:

Terminal Server - Remove Server Manager Pinned to Start Menu

We are setting up new Windows Server 2008 Terminal Servers running Citrix XenApp 5.x  When a user logs in, the "Server Manager" is pinned to the Start menu, but not Internet Explorer or Microsoft Outlook by default.  How can I remove Server Manager from being pinned to the Start menu and force IE and Outlook to be pinned when a end user logs into a session on these servers?

I know they cannot access Server Manager without an admin account, but there must be a default setting somewhere to keep this from being pinned to the Start menu by defaul, as well as add IE and Outlook.  Having users manually do this is cumbersome.

Thank you!
2 Solutions
Vince GlissonCommented:
Right click on it and select "remove from this list"
robroy1972Author Commented:
Yes individuals can "remove from this list" but we are trying to prevent it from pinning itself by default to users Start menu to start with.
You can create a default profile with the Server Manager already unpinned from the Start Menu.

Default profiles have been discussed in the following thread (the how to, it the accepted solution):
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

Carl WebsterCommented:
I don't have my lab server powered up right now to check all these settings.

You can add it to your TS Group Policy:


There is a server manager section:

ServerManager.admx      Configure the refresh interval for Server Manager
ServerManager.admx      Do not display Initial Configuration Tasks window automatically at logon
ServerManager.admx      Do not display Manage Your Server page at logon
ServerManager.admx      Do not display Server Manager automatically at logon

GroupPolicyPreferences.admx      Start Menu (GPOE)      User      Start Menu policy allows an administrator to set start menu and task bar options.

StartMenu.admx      Remove pinned programs list from the Start Menu
Henrik JohanssonSystems engineerCommented:
The policy settings mentioned by Carl is for restrict it from automatically run when administrators log on, and will not remove them from pinned program. The "Remove pinned programs list" will do the job as it removes the feature, but that's a little bit to hard.

I haven't found any GPO setting that will manage this, so sadly it seams to nead to be done by editing Default profile to affect new users.

A quick and dirty solution is to just rename "Server Manager.lnk" located in "C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools" and "Command Prompt.lnk" located in "C:\Users\Default\AppData\Microsoft\Windows\Start Menu\Programs\Accessories" to something else. When users try to start program, system will not find the target and ask the user to remove the link from pinned programs. I nead to find a better solution as I'm additional to this been asked to add some standard applications to the area. I'll let you know if I find something better.

In following folder, you also have the icons in Quick Launch for Default-profile: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch
Henrik JohanssonSystems engineerCommented:
After some labbing, I found howto do it with GPO by using Group Policy Preferences functionality.
The value is stored in HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\StartPage\Favorites

Create/edit a GPO and expand "User Configuration\Preferences\Windows Settings\Registry"
Add new value and browse to the HKCU\SOFTWARE\...\Favorites if logged on as user that has configured the pinned program or HKEY_USERS\<SID>\... if another logged on user has done the pinning.

As it's a binary value containing all pinned programs, it will overwrite any modifications done by user when applying the policy.

If linking GPO to OU with TS-server computer objects, you also nead to enable loopback processing by using "Computer Configuration\Policies\Administrative Templates\System\Group Policy\User Group Policy loopback processing mode"
Henrik JohanssonSystems engineerCommented:
I forgot one thing in http:#24520179
If using the method with HKEY_USERS\<SID>\SOFTWARE\... to browse to the value, it's just for collecting the requested value and nead to be modified again and changed to the correct path HKCU\SOFTWARE\...
I was also having this same issue and I followed this step and it worked great for me

"In following folder, you also have the icons in Quick Launch for Default-profile: C:\Users\Default\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch"

I guess it was easier for me because my TS Farm is still in dev so I don't have a bunch of profiles and only two TS.  anyways thanks for the info

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Tackle projects and never again get stuck behind a technical roadblock.
Join Now