B4Z.co.uk
Sharing IT knowledge, One Post At A Time.
Menu Close
  • Home
  • About
  • Exchange Server
  • ISA Server
  • OCS
  • Other
  • VMware

Remote Desktop Services Lockdown Policy

Remote Desktop Services – User Lockdown Policy

February 12, 2011 20 Comments

I recently deployed a small Windows Server 2008 R2 Remote Desktop Services environment and experience an issue where I could not hide the administrative tools folder that is inherited as a part of the default user profile. This meant that when a user connected to the session host (Terminal Server) they could see the administrative tools icon and associated MMC snap-in’s on the Start Menu. After trawling through all user based group policy objects, I realised hiding the administrative tools folder was not possible. To achieve this, I created a custom ADM template that could be imported into a Group Policy Object in order to hide the administrative tools entry. The steps I performed are featured below:

1. On a Windows Server 2008 R2 machine, with the Group Policy Management console installed, download and place the custom ADM file in the C:\Windows\inf. The ADM template (rdsadmintools.adm) can be download here, please right click the link and select Save Target As.

2. Edit your existing user lockdown Group Policy Object. Expand the user configuration, polices, then right click Administrative Templates and select Add/Remove Templates.

3. In the Add/Remove dialog box, select Add and then browse to the rdsadmintools.adm file and click ok followed by clicking close.

4. You should now see a “Classic Administrative Templates (ADM)” folder under the main Administrative Templates container. Double click this container and then double click the Remote Desktop Services container to reveal the GPO.

5. Double click the “Remove Administrative Tools From the Start Menu” GPO, click Enable and then using the drop down select box select “Off” and click ok.

Your all done, when logging in as a remote desktop services user you should now no longer be able to see the administrative tools start menu item.

Other ADM Template, Administrative Tools Start Menu, Group Policy Object, Remote Desktop Services, Remote Desktop Services Lockdown Policy, Remove Administrative Tools, User Profile, Windows Server 2008 R2

Search Content

Social Media

Tweets by @Bazz0r

Blog Archive

  • August 2015
  • January 2015
  • November 2014
  • September 2014
  • May 2014
  • April 2014
  • March 2014
  • December 2013
  • September 2013
  • July 2013
  • March 2013
  • February 2013
  • September 2012
  • June 2012
  • May 2012
  • April 2012
  • February 2012
  • January 2012
  • November 2011
  • July 2011
  • June 2011
  • May 2011
  • April 2011
  • March 2011
  • February 2011
  • January 2011
  • December 2010
  • November 2010
  • October 2010
  • September 2010
  • August 2010
  • July 2010
  • June 2010
  • May 2010
  • April 2010

Meta

  • Log in
  • Entries RSS
  • Comments RSS
  • WordPress.org
© 2019 B4Z.co.uk. All rights reserved.
Fashionista by aThemes