Our organization just got its first Server 2008 terminal server for hosting applications. Previously we've been using 2003 which worked great but we updated a few other servers to Server 2008 (file server, mail server) and I really enjoyed 2008 so when it came to upgrade I went with that Server OS.
I'm having problems figuring out how to control the Terminal Server's user policies though. When our users log in (they are Domain Users only, not admins) they can see the Server Manager, Command Prompt, and Administrative Tools link in the Start Menu. Of course I do not want them to see any of this. The only thing they should need is the applications being hosted (Outlook, Quickbooks Enterprise, Adobe Reader). I don't recall having this issue with Server 2003.
Does this have to managed through a group policy? I looked in Local Security Policy for the machine but couldn't find anything. I also tried editing the Default Profile but that got me no where.