After installing the Desktop Experience feature for Windows 2008 R2 and promptly uninstalling it, Terminal Server users have an option in the start menu labelled Windows Security. The option enables them to change their password, which is not desirable. In Group Policy there is a setting to disable the option as described here
. After applying the setting to the Terminal Server User Domain Policy group, the Windows Security option still shows up in the Start Menu. I can confirm that the setting "Remove Windows Security item from Start menu" is applied to all Terminal Server Users, but it doesn't appear to be having an effect. Thank you for the help.