Solved

Disable normal user to access Administrative Tools, Server Manager, Windows Security, Shutdown etc

Posted on 2016-10-18
2
25 Views
Last Modified: 2016-11-07
I need to remove or hide some of the options from the Start Button in the terminal server so that users cannot access (eg. Administrative Tools, Server Manager, Windows Security, Shutdown etc.) when they login.  Please advise how to do this. Thanks
0
Comment
Question by:YaYangTeah
  • 2
2 Comments
 
LVL 10

Accepted Solution

by:
Muhammad Mulla earned 500 total points (awarded by participants)
ID: 41849813
These settings can all be found in group policy. I've listed some of the settings down below.

You will need to create a policy and apply it, either via an OU or by security filtering to your non-admin users.

Computer Settings:

Administrative Templates > System > Server Manager > Do not display server manager...

User settings:

Administrative templates > Control Panel > show only specified control panel items > enabled > mlcfg32.cpl

Control Panel/Add or Remove Programs >
  • Hide Add New Programs page
  • Hide Add/Remove Windows Components page
  • Hide Change or Remove programs page
  • Hide the add a program from CD rom...
  • Hide the add programs from Microsoft...
  • Hide the Add programs from your network...
  • Hide the Set Program Access..
  • Remove Add or Remove Programs

Start Menu adn Task bar >
  • Lock the Taskbar
  • Prevent changes to Taskbar and Start Menu Settings
  • Remove access to the context menus for the taskbar
  • Remove and prevent access to the Shut Down, Restart, Sleep, and Hibernate commands
  • Remove Games link from Start Menu
  • Remove Help menu from Start Menu  
  • Remove links and access to Windows Update
  • Remove Music icon from Start Menu
  • Remove Network icon from Start Menu
  • Remove Recorded TV link from Start Menu
  • Remove Run menu from Start Menu
  • Remove Search link from Start Menu
  • Remove the networking icon
  • Remove the Security and Maintenance icon
  • Turn off personalized menus
0
 
LVL 10

Expert Comment

by:Muhammad Mulla
ID: 41876858
The requested settings and where they can be found have been detailed in the post.
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In this article, I'll explain how to setup a Plex Media Server (https://plex.tv/) on a Redhat (Centos) 7 based NAS with screenshots to help those looking for assistance.  What is Plex? If you aren't familiar with Plex, it’s a DLNA media serv…
Let’s list some of the technologies that enable smooth teleworking. 
This tutorial will show how to push an installation of Backup Exec to an additional server in both 2012 and 2014 versions of the software. Click on the Backup Exec button in the upper left corner. From here, select Installation and Licensing, then I…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

813 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

10 Experts available now in Live!

Get 1:1 Help Now