How to remove "Help" menu / About Windows window?

I am dealing with building a RDP environment, and I am pretty much satisfied with everything, but as I need to allow people to access Printers folder, there I have a problem.

Users can learn about the TS machine by clicking "Help" -> "About Windows" + there is no reason to have that "Is this copy of Windows legal?"

How to remove these nasties, and preferably, entire help menu?
about-windows.gif
mrmutAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Robin CMSenior Security and Infrastructure EngineerCommented:
Having worked with and designed Citrix/TS environments for about 10 years, my advice would be: take it easy with the removing/hiding/customising the hell out of your system.

So it may not be necessary for users to have access to those menu options, but is it doing any harm either? Why do you care? Control freak sysadmins are storing up future headaches not only for themselves but also for their support staff - if you remove something/prevent an end user from accessing something you're making the system less inuitive.

OK so the options we're talking about here are hardly necessary, but big deal if they can see how much RAM is in your server, and so what if they get a webpage telling them how to identify legal copies of Windows.

Obviously there are situations where you will need to lock everything right down, but then you might want to be using group policy/logon scripts to connect printers automatically and remove printers and faxes altogether. etc.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
mrmutAuthor Commented:
Thank you.

The fact is that I need to secure this as much is possible, as this is for an accounting office that provide access to accounting app for external RDP users.

You've mentioned connecting to printers through GPOs? Would you be kind enough to direct me to a resource on this? - The specific problem is that users work from their homes/offices and have a wide variety of printers, tho I have (will) standardize one default PDF printer for them all.
0
Robin CMSenior Security and Infrastructure EngineerCommented:
Group Policy Management Editor:
User Configuration, Policies, Windows Settings, Deployed Printers.
which will deploy to everyone with permissions for that policy with the OU(s) it's linked to.
Or, if you have the Group Policy Prefences Client Side Extensions installed on your terminal server (you should!) then use:
User Configuration, Preferences, Control Panel Settings, Printers
which is much more flexible and generally nicer.
If you've not used GPPrefs then see this for info:
http://www.microsoft.com/downloads/details.aspx?FamilyID=42e30e3f-6f01-4610-9d6e-f6e0fb7a0790&DisplayLang=en
0
Making Bulk Changes to Active Directory

Watch this video to see how easy it is to make mass changes to Active Directory from an external text file without using complicated scripts.

mrmutAuthor Commented:
I've awarded points, tho I would appreciate if you could explain to me in short what Client Side Extensions actually are.

I've searched and read MS documentation, but I don't understand the concept of this and how it would work.

Thank you very much.
0
Mike KlineCommented:
What was being discussed above are group policy preference extenstions.   Take a look at this short whitepaper on GPP from GP MVP Darren Mar-Elia
http://sdmsoftware.com/blog/2008/09/whitepaper_on_group_policy_pre.html
Should help you out.
Thanks
Mike
0
Robin CMSenior Security and Infrastructure EngineerCommented:
In a nutshell, you need to have the client side extensions installed wherever you want the GPPrefs to take effect.
They're an extension to the classic group policy stuff (I believe Microsoft bought a company to aquire the technlogy), so it's a bolt-on to the standard Windows functionality, at least on XP/2003.
0
Mike KlineCommented:
The company they bought was desktop standard, exactly right that is where all this GPP stuff came from.
0
mrmutAuthor Commented:
Thanks guys. :)

Complex at first, tho pretty useful.
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Microsoft Server OS

From novice to tech pro — start learning today.