Solved

Disabling some commands or buttons in word 2013 template or in GPO

Posted on 2015-02-07
1
194 Views
Last Modified: 2015-02-11
Hi there,
Running server 2008 R2 domain, clients windows 8.1
I have installed a remote desktop server where users can use word 2013.  Users can simply go into the file print and seach the computers, printers users etc.  Since word 2013 and other office apps will work as remote app I would either like to disable many buttons via the respective templates or GPO itself.
1) how to disable printing from word 2013 altogether if its possible, By disabling file , print  OR find printer pop up.
2)  I have both the templates for office 2013 and GPO.
How and where I can make the changes to make these office web applications more secure so that users can simply work and save but not start searching for my domain printers via 'Find printers'.
Note:  I can make changes to the remote server or the GPO (templates for office as well, so any effective guidance would work)
Need help
0
Comment
Question by:amanzoor
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 63

Accepted Solution

by:
btan earned 500 total points
ID: 40596608
I see first is to make sure  local drive of remote server is prevented from remote access where you can use GPO to hide these drive and indirectly user are not able to browse other mapped network drive. Users will be provided with an error message even if they use the UNC path to access the drives. Can "Enabled" below

e.g. User Configuration\Policies\Administrative Templates\Windows Components\Windows Explorer:
>Hide these specified drives in My Computer.
>Prevent access to drives from My Computer.
e.g. User Configuration\Administrative Templates\Windows Components\Windows Explorer:
>Hides the Manage item on the Windows Explorer context menu
>Remove Hardware tab
>Remove “Map Network Drive” and “Disconnect Network Drive”
>Remove Search button from Windows Explorer
>Disable Windows Explorer's default context menu
>Remove Run menu from Start Menu

Specific to printing, most of the time printer driver is in the RDS server hence client is able to "see" the printer and likely there is redirection assuming driver is not available since it is not ideal for RDS to have all printer drivers. See this for more info, http://www.virtualizationadmin.com/articles-tutorials/vdi-articles/microsoft-hyper-v/how-configure-microsoft-rds-universal-printing.html

Hence I suggest preventing mapping of client printer in RDS environment as per below as well.
http://blogs.technet.com/b/rmilne/archive/2014/06/02/how-to-disable-remote-desktop-printer-mapping.aspx

e.g. Computer Configuration –> Administrative Templates –> Windows Components  –>  Remote Desktop Services –> Remote Desktop Session Host -> Printer Redirection > Do not allow client printer redirection
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This article describes my battle tested process for setting up delegation. I use this process anywhere that I need to setup delegation. In the article I will show how it applies to Active Directory
Did you know that more than 4 billion data records have been recorded as lost or stolen since 2013? It was a staggering number brought to our attention during last week’s ManageEngine webinar, where attendees received a comprehensive look at the ma…
The viewer will learn how to use the =DISCRINV command to create a discrete random variable, use this command to model a set of probabilities and outcomes in a Monte Carlo simulation, and learn how to find the standard deviation of a set of probabil…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

730 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question