Solved

Disable normal user to access Administrative Tools, Server Manager, Windows Security, Shutdown etc

Posted on 2016-10-18
2
44 Views
Last Modified: 2016-11-07
I need to remove or hide some of the options from the Start Button in the terminal server so that users cannot access (eg. Administrative Tools, Server Manager, Windows Security, Shutdown etc.) when they login.  Please advise how to do this. Thanks
0
Comment
Question by:YaYangTeah
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
2 Comments
 
LVL 10

Accepted Solution

by:
Muhammad Mulla earned 500 total points (awarded by participants)
ID: 41849813
These settings can all be found in group policy. I've listed some of the settings down below.

You will need to create a policy and apply it, either via an OU or by security filtering to your non-admin users.

Computer Settings:

Administrative Templates > System > Server Manager > Do not display server manager...

User settings:

Administrative templates > Control Panel > show only specified control panel items > enabled > mlcfg32.cpl

Control Panel/Add or Remove Programs >
  • Hide Add New Programs page
  • Hide Add/Remove Windows Components page
  • Hide Change or Remove programs page
  • Hide the add a program from CD rom...
  • Hide the add programs from Microsoft...
  • Hide the Add programs from your network...
  • Hide the Set Program Access..
  • Remove Add or Remove Programs

Start Menu adn Task bar >
  • Lock the Taskbar
  • Prevent changes to Taskbar and Start Menu Settings
  • Remove access to the context menus for the taskbar
  • Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands
  • Remove Games link from Start Menu
  • Remove Help menu from Start Menu  
  • Remove links and access to Windows Update
  • Remove Music icon from Start Menu
  • Remove Network icon from Start Menu
  • Remove Recorded TV link from Start Menu
  • Remove Run menu from Start Menu
  • Remove Search link from Start Menu
  • Remove the networking icon
  • Remove the Security and Maintenance icon
  • Turn off personalized menus
0
 
LVL 10

Expert Comment

by:Muhammad Mulla
ID: 41876858
The requested settings and where they can be found have been detailed in the post.
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The recent Microsoft changes on update philosophy for Windows pre-10 and their impact on existing WSUS implementations.
For anyone that has accidentally used newSID with Server 2008 R2 (like I did) and hasn't been able to get the server running again because you were unlucky (as I was) and had no backups - I was able to get things working by doing a Registry Hive rec…
This tutorial will walk an individual through locating and launching the BEUtility application to properly change the service account username and\or password in situation where it may be necessary or where the password has been inadvertently change…
Michael from AdRem Software outlines event notifications and Automatic Corrective Actions in network monitoring. Automatic Corrective Actions are scripts, which can automatically run upon discovery of a certain undesirable condition in your network.…
Suggested Courses

623 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question