GPO to restrict users from launching updates icon

[Guest Dennis_S]

Hello,

 

Is there a security policy to restrict users from launching the Updates

alert icon, or even better prevent them from seeing the icon on the terminal

server? A few user are members of the administrator group and sometimes

mistake the terminal server Updates alert icon with their client icon.

 

Thanks.

[Guest Patrick Rouse]

RE: GPO to restrict users from launching updates icon

 

Group Policy -> User Configuration -> Administrative Templates -> Windows

Components -> Windows Update -> Remove access to all Windows Update Features.

 

That being said, if users are administrators, they can alter the OS in just

about any way they want. I'd recommend that you not allow anyone to logon

interactively as an administrator, except when performing administrative

tasks.

 

 

--

Patrick C. Rouse

Microsoft MVP - Terminal Server

SE, West Coast USA & Canada

Quest Software, Provision Networks Division

Virtual Client Solutions

http://www.provisionnetworks.com

 

 

"Dennis_S" wrote:

> Hello,

>

> Is there a security policy to restrict users from launching the Updates

> alert icon, or even better prevent them from seeing the icon on the terminal

> server? A few user are members of the administrator group and sometimes

> mistake the terminal server Updates alert icon with their client icon.

>

> Thanks.

[Guest Patrick Rouse]

RE: GPO to restrict users from launching updates icon

 

Group Policy -> User Configuration -> Administrative Templates -> Windows

Components -> Windows Update -> Remove access to all Windows Update Features.

 

That being said, if users are administrators, they can alter the OS in just

about any way they want. I'd recommend that you not allow anyone to logon

interactively as an administrator, except when performing administrative

tasks.

 

 

--

Patrick C. Rouse

Microsoft MVP - Terminal Server

SE, West Coast USA & Canada

Quest Software, Provision Networks Division

Virtual Client Solutions

http://www.provisionnetworks.com

 

 

"Dennis_S" wrote:

> Hello,

>

> Is there a security policy to restrict users from launching the Updates

> alert icon, or even better prevent them from seeing the icon on the terminal

> server? A few user are members of the administrator group and sometimes

> mistake the terminal server Updates alert icon with their client icon.

>

> Thanks.

[Guest Dennis_S]

RE: GPO to restrict users from launching updates icon

 

Thanks for the info Patrick. Users being members of the administrators group

is a hold over from way back. They have been removed.

 

Dennis

 

"Patrick Rouse" wrote:

> Group Policy -> User Configuration -> Administrative Templates -> Windows

> Components -> Windows Update -> Remove access to all Windows Update Features.

>

> That being said, if users are administrators, they can alter the OS in just

> about any way they want. I'd recommend that you not allow anyone to logon

> interactively as an administrator, except when performing administrative

> tasks.

>

>

> --

> Patrick C. Rouse

> Microsoft MVP - Terminal Server

> SE, West Coast USA & Canada

> Quest Software, Provision Networks Division

> Virtual Client Solutions

> http://www.provisionnetworks.com

>

>

> "Dennis_S" wrote:

>

> > Hello,

> >

> > Is there a security policy to restrict users from launching the Updates

> > alert icon, or even better prevent them from seeing the icon on the terminal

> > server? A few user are members of the administrator group and sometimes

> > mistake the terminal server Updates alert icon with their client icon.

> >

> > Thanks.