Link to home
Create AccountLog in
Avatar of dimensionav
dimensionavFlag for Mexico

asked on

How to disable administrative tools in terminal server ?

I would like to disable the access to administrative tools from terminal server in WS2003, I created a Group Policy for it.

Regards
Avatar of Govvy
Govvy
Flag of United States of America image

Link the GPO to the OU where the Terminal Server computer object is located in AD
ASKER CERTIFIED SOLUTION
Avatar of Pete Long
Pete Long
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Avatar of dimensionav

ASKER

PeteLong: I found this in your link but I would like to adapt it to my own OU (TS Users) and GPO (Restricted TS Users), would you mind to tell me how to do it ?

CLASS USER
CATEGORY "Start Menu Administrative Tools(CustomADM)"
  POLICY "Remove Administrative Tools from Start Menu"
  EXPLAIN !!ADMHelp
  KEYNAME Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    PART !!ADM_Configure DROPDOWNLIST REQUIRED
    VALUENAME "Start_AdminToolsRoot"
    ITEMLIST
      NAME !!ADMoff VALUE NUMERIC 0 DEFAULT
      NAME !!ADMon VALUE NUMERIC 1
    END ITEMLIST
    END PART
  END POLICY
END CATEGORY

[strings]
ADM_Configure="Set the Administrative Tools to:"
ADMoff="Hidden"
ADMon="Visible"

; explains
ADMhelp="Set Administrative Tools to be shown or hidden on the Start Menu. No need to delete the folder off your TS now! MMills - 30/03/10"
SOLUTION
Link to home
membership
Create an account to see this answer
Signing up is free. No credit card required.
Create Account
Does it work for Windows Server 2003 too?
hmmmm, good question!!!

Honestly, I haven't tried it but since it's Adm you can try.
The point is since you will be only putting it in your specific GPO you can Wack it if it's not working...

Sorry, I can't be precise...

A
I´ll try it but first a final question, is this user policy going to disable the administrative tools from all remote desktop users or only for those included in the GPO?
It depends, if you keep it to Authenticated Users then all, however if you apply to some specific group or use Delegation then only that will take effect.