Where to remove Administrative Tools from Start Menu & other

[Guest compsosinc@gmail.com]

1. We have remote users logging into a TS that is also a DC using thin-

clients. We have created an OU for the these users. Currently when

they login to the TS they get on the Start Menu:

 

Administrative Tools

Windows Security

 

How do we remove those in the GP linked to this OU?

 

2. We also have the IE and "Show Desktop" icons showing in the Quick

Launch.

 

How do we remove those?

 

3. We have icons showing on the lower right corner of the taskbar: the

Network icon, the volume, and an SQL database icon for backup

software.

 

How do we reove/hide those?

 

4. When logged into the TS, the screen goes blank after so many

minutes -such as a power saving feature or screen saver, but we

disabled any screensavers in the GPO. How do we prevent this?

 

Thanks in advance

[Guest Patrick Rouse]

RE: Where to remove Administrative Tools from Start Menu & other

 

The best thing to have been done before you started would have been to create

a Default User Profile that has the settings that you desire.

 

You are aware that if you make these GPO lockdown settings, that they will

also apply when users logon to non-Terminal Server computers, yes?

 

Redirect their start menu, my documents and perhaps desktop as well to

network shared folders. Redirect to locations where users do not have write

permissions if you want to lock down the settings.

 

http://www.msterminalservices.org/articles/Configure-Folder-Redirection.html

 

Script the deletion of the lnk files that you don't want, or just do search

and delete them manually.

 

Disable the screen saver on the TS console, or just delete the .scr files

from the server.

 

 

--

Patrick C. Rouse

Microsoft MVP - Terminal Server

SE, West Coast USA & Canada

Quest Software, Provision Networks Division

Virtual Client Solutions

http://www.provisionnetworks.com

 

 

"compsosinc@gmail.com" wrote:

> 1. We have remote users logging into a TS that is also a DC using thin-

> clients. We have created an OU for the these users. Currently when

> they login to the TS they get on the Start Menu:

>

> Administrative Tools

> Windows Security

>

> How do we remove those in the GP linked to this OU?

>

> 2. We also have the IE and "Show Desktop" icons showing in the Quick

> Launch.

>

> How do we remove those?

>

> 3. We have icons showing on the lower right corner of the taskbar: the

> Network icon, the volume, and an SQL database icon for backup

> software.

>

> How do we reove/hide those?

>

> 4. When logged into the TS, the screen goes blank after so many

> minutes -such as a power saving feature or screen saver, but we

> disabled any screensavers in the GPO. How do we prevent this?

>

> Thanks in advance

>

[Guest compsosinc@gmail.com]

Re: Where to remove Administrative Tools from Start Menu & other

 

On Jan 31, 4:52 pm, Patrick Rouse

<PatrickRo...@discussions.microsoft.com> wrote:

> The best thing to have been done before you started would have been to create

> a Default User Profile that has the settings that you desire.

>

> You are aware that if you make these GPO lockdown settings, that they will

> also apply when users logon to non-Terminal Server computers, yes?

>

> Redirect their start menu, my documents and perhaps desktop as well to

> network shared folders.  Redirect to locations where users do not have write

> permissions if you want to lock down the settings.

>

> http://www.msterminalservices.org/articles/Configure-Folder-Redirecti...

>

> Script the deletion of the lnk files that you don't want, or just do search

> and delete them manually.

>

> Disable the screen saver on the TS console, or just delete the .scr files

> from the server.

>

> --

> Patrick C. Rouse

> Microsoft MVP - Terminal Server

> SE, West Coast USA & Canada

> Quest Software, Provision Networks Division

> Virtual Client Solutionshttp://www.provisionnetworks.com

>

>

>

> "compsos...@gmail.com" wrote:

> > 1. We have remote users logging into a TS that is also a DC using thin-

> > clients. We have created an OU for the these users. Currently when

> > they login to the TS they get on the Start Menu:

>

> > Administrative Tools

> > Windows Security

>

> > How do we remove those in the GP linked to this OU?

>

> > 2. We also have the IE and "Show Desktop" icons showing in the Quick

> > Launch.

>

> > How do we remove those?

>

> > 3. We have icons showing on the lower right corner of the taskbar: the

> > Network icon, the volume, and an SQL database icon for backup

> > software.

>

> > How do we reove/hide those?

>

> > 4. When logged into the TS, the screen goes blank after so many

> > minutes -such as a power saving feature or screen saver, but we

> > disabled any screensavers in the GPO. How do we prevent this?

>

> > Thanks in advance- Hide quoted text -

>

> - Show quoted text -

 

Since this TS is also DC, does the info in the link above still apply?

 

Also, these TS users will not be logging into the domain via "fat

clients" and/or onto the domain on the local LAN. They are strictly

going to be Thin-client users logging onto the TS for the purpose of

running (1) application.

 

Thanks

[Guest Patrick Rouse]

Re: Where to remove Administrative Tools from Start Menu & other

 

Folder Redirection is applied in the User Configuration settings of a GPO, so

it can be applied, even on a DC. If you only have one server, and are not

using roaming profiles or mandatory profiles, this will be of limited benefit.

 

--

Patrick C. Rouse

Microsoft MVP - Terminal Server

SE, West Coast USA & Canada

Quest Software, Provision Networks Division

Virtual Client Solutions

http://www.provisionnetworks.com

 

 

"compsosinc@gmail.com" wrote:

> On Jan 31, 4:52 pm, Patrick Rouse

> <PatrickRo...@discussions.microsoft.com> wrote:

> > The best thing to have been done before you started would have been to create

> > a Default User Profile that has the settings that you desire.

> >

> > You are aware that if you make these GPO lockdown settings, that they will

> > also apply when users logon to non-Terminal Server computers, yes?

> >

> > Redirect their start menu, my documents and perhaps desktop as well to

> > network shared folders. Redirect to locations where users do not have write

> > permissions if you want to lock down the settings.

> >

> > http://www.msterminalservices.org/articles/Configure-Folder-Redirecti...

> >

> > Script the deletion of the lnk files that you don't want, or just do search

> > and delete them manually.

> >

> > Disable the screen saver on the TS console, or just delete the .scr files

> > from the server.

> >

> > --

> > Patrick C. Rouse

> > Microsoft MVP - Terminal Server

> > SE, West Coast USA & Canada

> > Quest Software, Provision Networks Division

> > Virtual Client Solutionshttp://www.provisionnetworks.com

> >

> >

> >

> > "compsos...@gmail.com" wrote:

> > > 1. We have remote users logging into a TS that is also a DC using thin-

> > > clients. We have created an OU for the these users. Currently when

> > > they login to the TS they get on the Start Menu:

> >

> > > Administrative Tools

> > > Windows Security

> >

> > > How do we remove those in the GP linked to this OU?

> >

> > > 2. We also have the IE and "Show Desktop" icons showing in the Quick

> > > Launch.

> >

> > > How do we remove those?

> >

> > > 3. We have icons showing on the lower right corner of the taskbar: the

> > > Network icon, the volume, and an SQL database icon for backup

> > > software.

> >

> > > How do we reove/hide those?

> >

> > > 4. When logged into the TS, the screen goes blank after so many

> > > minutes -such as a power saving feature or screen saver, but we

> > > disabled any screensavers in the GPO. How do we prevent this?

> >

> > > Thanks in advance- Hide quoted text -

> >

> > - Show quoted text -

>

> Since this TS is also DC, does the info in the link above still apply?

>

> Also, these TS users will not be logging into the domain via "fat

> clients" and/or onto the domain on the local LAN. They are strictly

> going to be Thin-client users logging onto the TS for the purpose of

> running (1) application.

>

> Thanks

>