LockDown of Terminal Server Sessions

[tony9691]

I have a terminal server running on a domain. The OS is Windows 2003 server
-standard.
I have created a special group policy with permissions and restrictions for
all remote users connecting the server via terminal services. Evertyhing
seems to work fine, but the problem is that Administrative Tools applet under
Control Panel is fully accessible for all remote users. Access to Control
Panel is not allowed, but you can always reach Administrative Tools thru
Start/All Programs. I have tried everything but it seems that I cannot deny
access to this applet neither I can hide it from All Programs under Start
Menu.
Please help!!!

 

[Jeff Pitsch]

Why can't you remove it from teh all users start menu?

Jeff Pitsch
Microsoft MVP - Terminal Server
Citrix Technology Professional
Provision Networks VIP

Forums not enough?
Get support from the experts at your business
http://jeffpitschconsulting.com

tony9691 wrote:
> I have a terminal server running on a domain. The OS is Windows 2003 server
> -standard.
> I have created a special group policy with permissions and restrictions for
> all remote users connecting the server via terminal services. Evertyhing
> seems to work fine, but the problem is that Administrative Tools applet under
> Control Panel is fully accessible for all remote users. Access to Control
> Panel is not allowed, but you can always reach Administrative Tools thru
> Start/All Programs. I have tried everything but it seems that I cannot deny
> access to this applet neither I can hide it from All Programs under Start
> Menu.
> Please help!!!

 

[tony9691]

Hey Jeff,

I think I did it. I have just removed common program groups from the start
menu thru the group policy I created and it works now. One other question
that I have if you be so kind to help.
It seems that if I map a drive on the server the mapped drive is not visible
for the users looging remotely to the terminal server. Anyway to change that.
I gave permissions on the mapped drive to the particular users. Sill no luck.
Thank you.

"Jeff Pitsch" wrote:

> Why can't you remove it from teh all users start menu?
>
> Jeff Pitsch
> Microsoft MVP - Terminal Server
> Citrix Technology Professional
> Provision Networks VIP
>
> Forums not enough?
> Get support from the experts at your business
> http://jeffpitschconsulting.com
>
> tony9691 wrote:
> > I have a terminal server running on a domain. The OS is Windows 2003 server
> > -standard.
> > I have created a special group policy with permissions and restrictions for
> > all remote users connecting the server via terminal services. Evertyhing
> > seems to work fine, but the problem is that Administrative Tools applet under
> > Control Panel is fully accessible for all remote users. Access to Control
> > Panel is not allowed, but you can always reach Administrative Tools thru
> > Start/All Programs. I have tried everything but it seems that I cannot deny
> > access to this applet neither I can hide it from All Programs under Start
> > Menu.
> > Please help!!!
>

 

[Helge Klein]

Network drive mappings are stored per user (in HKCU), not per
computer. You cannot make a mapped drive visible to another user.

If you want to have certain mappings per user or group then use a
logon script that maps the drives depending on group membership or
username. Please post in a new thread if you need assistance with
that.

Helge

----------------
Please visit my blog:
http://it-from-inside.blogspot.com
----------------

On 31 Jul., 17:26, tony9691 <tony9...@discussions.microsoft.com>
wrote:
> Hey Jeff,
>
> I think I did it. I have just removed common program groups from the start
> menu thru the group policy I created and it works now. One other question
> that I have if you be so kind to help.
> It seems that if I map a drive on the server the mapped drive is not visible
> for the users looging remotely to the terminal server. Anyway to change that.
> I gave permissions on the mapped drive to the particular users. Sill no luck.
> Thank you.
>
> "Jeff Pitsch" wrote:
> > Why can't you remove it from teh all users start menu?
>
> > Jeff Pitsch
> > Microsoft MVP - Terminal Server
> > Citrix Technology Professional
> > Provision Networks VIP
>
> > Forums not enough?
> > Get support from the experts at your business
> >http://jeffpitschconsulting.com
>
> > tony9691 wrote:
> > > I have a terminal server running on a domain. The OS is Windows 2003 server
> > > -standard.
> > > I have created a special group policy with permissions and restrictions for
> > > all remote users connecting the server via terminal services. Evertyhing
> > > seems to work fine, but the problem is that Administrative Tools applet under
> > > Control Panel is fully accessible for all remote users. Access to Control
> > > Panel is not allowed, but you can always reach Administrative Tools thru
> > > Start/All Programs. I have tried everything but it seems that I cannot deny
> > > access to this applet neither I can hide it from All Programs under Start
> > > Menu.
> > > Please help!!!