LockDown of Terminal Server Sessions

[Guest tony9691]

I have a terminal server running on a domain. The OS is Windows 2003 server

-standard.

I have created a special group policy with permissions and restrictions for

all remote users connecting the server via terminal services. Evertyhing

seems to work fine, but the problem is that Administrative Tools applet under

Control Panel is fully accessible for all remote users. Access to Control

Panel is not allowed, but you can always reach Administrative Tools thru

Start/All Programs. I have tried everything but it seems that I cannot deny

access to this applet neither I can hide it from All Programs under Start

Menu.

Please help!!!

[Guest Jeff Pitsch]

Re: LockDown of Terminal Server Sessions

 

Why can't you remove it from teh all users start menu?

 

Jeff Pitsch

Microsoft MVP - Terminal Server

Citrix Technology Professional

Provision Networks VIP

 

Forums not enough?

Get support from the experts at your business

http://jeffpitschconsulting.com

 

tony9691 wrote:

> I have a terminal server running on a domain. The OS is Windows 2003 server

> -standard.

> I have created a special group policy with permissions and restrictions for

> all remote users connecting the server via terminal services. Evertyhing

> seems to work fine, but the problem is that Administrative Tools applet under

> Control Panel is fully accessible for all remote users. Access to Control

> Panel is not allowed, but you can always reach Administrative Tools thru

> Start/All Programs. I have tried everything but it seems that I cannot deny

> access to this applet neither I can hide it from All Programs under Start

> Menu.

> Please help!!!

[Guest tony9691]

Re: LockDown of Terminal Server Sessions

 

Hey Jeff,

 

I think I did it. I have just removed common program groups from the start

menu thru the group policy I created and it works now. One other question

that I have if you be so kind to help.

It seems that if I map a drive on the server the mapped drive is not visible

for the users looging remotely to the terminal server. Anyway to change that.

I gave permissions on the mapped drive to the particular users. Sill no luck.

Thank you.

 

"Jeff Pitsch" wrote:

> Why can't you remove it from teh all users start menu?

>

> Jeff Pitsch

> Microsoft MVP - Terminal Server

> Citrix Technology Professional

> Provision Networks VIP

>

> Forums not enough?

> Get support from the experts at your business

> http://jeffpitschconsulting.com

>

> tony9691 wrote:

> > I have a terminal server running on a domain. The OS is Windows 2003 server

> > -standard.

> > I have created a special group policy with permissions and restrictions for

> > all remote users connecting the server via terminal services. Evertyhing

> > seems to work fine, but the problem is that Administrative Tools applet under

> > Control Panel is fully accessible for all remote users. Access to Control

> > Panel is not allowed, but you can always reach Administrative Tools thru

> > Start/All Programs. I have tried everything but it seems that I cannot deny

> > access to this applet neither I can hide it from All Programs under Start

> > Menu.

> > Please help!!!

>

[Guest Helge Klein]

Re: LockDown of Terminal Server Sessions

 

Network drive mappings are stored per user (in HKCU), not per

computer. You cannot make a mapped drive visible to another user.

 

If you want to have certain mappings per user or group then use a

logon script that maps the drives depending on group membership or

username. Please post in a new thread if you need assistance with

that.

 

Helge

 

----------------

Please visit my blog:

http://it-from-inside.blogspot.com

----------------

 

On 31 Jul., 17:26, tony9691 <tony9...@discussions.microsoft.com>

wrote:

> Hey Jeff,

>

> I think I did it. I have just removed common program groups from the start

> menu thru the group policy I created and it works now. One other question

> that I have if you be so kind to help.

> It seems that if I map a drive on the server the mapped drive is not visible

> for the users looging remotely to the terminal server. Anyway to change that.

> I gave permissions on the mapped drive to the particular users. Sill no luck.

> Thank you.

>

> "Jeff Pitsch" wrote:

> > Why can't you remove it from teh all users start menu?

>

> > Jeff Pitsch

> > Microsoft MVP - Terminal Server

> > Citrix Technology Professional

> > Provision Networks VIP

>

> > Forums not enough?

> > Get support from the experts at your business

> >http://jeffpitschconsulting.com

>

> > tony9691 wrote:

> > > I have a terminal server running on a domain. The OS is Windows 2003 server

> > > -standard.

> > > I have created a special group policy with permissions and restrictions for

> > > all remote users connecting the server via terminal services. Evertyhing

> > > seems to work fine, but the problem is that Administrative Tools applet under

> > > Control Panel is fully accessible for all remote users. Access to Control

> > > Panel is not allowed, but you can always reach Administrative Tools thru

> > > Start/All Programs. I have tried everything but it seems that I cannot deny

> > > access to this applet neither I can hide it from All Programs under Start

> > > Menu.

> > > Please help!!!