<div>
You'd need to establish some software execution policies, and some file redirects. You could create a group on each machine with restricted rights locally as well.
</div>


You'd need to establish some software execution policies, and some file redirects. You could create a group on each machine with restricted rights locally as well.

<div>
This article is a little older, but the ideas are still the same.<br />
<br />
<a href="https://technet.microsoft.com/en-us/library/2008.06.srp.aspx" rel="ugc">https://technet.microsoft.com/en-us/library/2008.06.srp.aspx</a>
</div>


This article is a little older, but the ideas are still the same.

https://technet.microsoft.com/en-us/library/2008.06.srp.aspx [https://technet.microsoft.com/en-us/library/2008.06.srp.aspx]

<div>
Thanks Brian. <br />
<br />
I am assuming the file redirects would be when the user accesses File Manager, control panel etc? <br />
<br />
Is there anyway to remove these completely from Start rather than redirecting them elsewhere?
</div>


Thanks Brian.

I am assuming the file redirects would be when the user accesses File Manager, control panel etc?

Is there anyway to remove these completely from Start rather than redirecting them elsewhere?

<div>
<div class="content wysiwyg-content">
Hi, <br />
<br />
We want to turn a clients PC's into Thin Clients but without using Thin Client software. <br />
<br />
We want to use Group Policy to uninstall all programs and restrict access to - File Manager, Browsers, Search options, My Computer, Control Panel etc. <br />
<br />
What we ultimately want is when a user log ons, they get 2 RDP icons on their desktop to Terminal Server and one for Skype plus access to log off, restart &amp;&nbsp;shut down. <br />
<br />
What would be the easiest way to do this using GP?<br />
<br />
Thanks
</div>
</div>


Hi, 

We want to turn a clients PC's into Thin Clients but without using Thin Client software. 

We want to use Group Policy to uninstall all programs and restrict access to - File Manager, Browsers, Search options, My Computer, Control Panel etc. 

What we ultimately want is when a user log ons, they get 2 RDP icons on their desktop to Terminal Server and one for Skype plus access to log off, restart & shut down. 

What would be the easiest way to do this using GP?

Thanks

Group Policy - locking down PC's

Windows Server 2012 is the server version of Windows 8 and the successor to Windows Server 2008 R2. Windows Server 2012 is the first version of Windows Server to have no support for Itanium-based computers since Windows NT 4.0. Windows Server 2012, now in its second release (Windows Server 2012 Release 2) includes Foundation, Essentials, Standard and Datacenter, and does not support IA-32 or IA-64 processors.

Windows Server 2012

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.