Can't remove "Printers and Faxes" from Start menu on clients

[SenTnel]

Hi !

We're running MetaFrame XP SP3, win2003 server, and defining a GPO can't remove the "Printers and Faxes" shortcut that appears on the Start menu. The problem is tha from here the users can access sensitive configuration settings that we don't want available. The other item that we would like to remove from the Start menu is the "Windows Security", since we don't want this users access the "Task Manager".

Comments, please !!!!!!
THANKS

 

[patrickrouse]

http://www.workthin.com/tshta.htm#LockingDownWindowsServer2003TerminalServerSessions

Specifically:
GPO->Computer Configuration->Administrative Templates->Windows Components->Terminal Services->Remove Windows Security Item from Start Menu.

You can also set NTFS Premissions on taskmgr.exe or use a software restriction policy to limit what applications users can run.

You can also restrict the start menu items here:
GPO->User Configuration->Administrative Templates-> Start Menu & Taskbar

or you can redirect the start menu to a custom one you specify with Redirected Folders.

GPO ->User Configuration->Windows Settings-> Folder Redirection

triCerat Simplify Lockdown can probably also help you to do this:

http://www.tricerat.com/?page=desktop2k1

Patrick Rouse
Microsoft MVP - Terminal Server

http://www.workthin.com

 

[Ogi]

Hi,

Why don't you remove the "Run" command from the Start Menu bar, then don't bother with Task Manager. With Run disabled users can't start new processes but if they have a hung process, they can still kill it!

Cheers,
Carl.