Set Group Policy Settings for the Remote Desktops

This policy removes links and access to the Windows Update Web site. The Windows Update Web site is only available for administrators.

Microsoft recommends enabling this policy to remove easy access to Internet Explorer for users.

This policy removes shortcuts to programs from the all users’ profile. Only the Start Menu in the user’s profile or the redirected Start Menu is available.

Microsoft recommends enabling this policy to remove easy access to built-in applications, such as games, the calculator, and Windows Media® Player.

This policy removes the Pinned Programs list from the Start Menu. It also removes the default links to Internet Explorer and Outlook® Express if they are pinned, and it prevents users from pinning any new programs to the Start Menu. The Frequently Used Programs list is not affected.

This policy removes Control Panel, Printers, and Network Connections from Settings on the Classic Start menu, My Computer and Windows Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running. However, users can still start Control Panel items by using other methods, such as right-clicking the desktop to open Display Properties or right-clicking My Computer to open System Properties.

Microsoft recommends enabling this policy to prevent easy access to viewing or changing system settings.

This policy prevents the Network Connections folder from opening. The policy also removes Network Connections from Settings on the Start Menu. Network Connections still appears in Control Panel and in Windows Explorer, but if users try to start it, a message appears explaining that a setting prevents this action.

Microsoft recommends enabling this policy to prevent users from creating new connections, such as VPN or dial-up connections.

This policy removes the Search item from the Start menu and from the context menu that appears when you right-click the Start menu. Also, the system does not respond when users press the Application key (the Windows logo key) +F.

In Windows Explorer, the Search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses CTRL+F. Also, the Search item does not appear in the context menu when you right-click an icon representing a drive or a folder.

This policy prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. This setting does not prevent users from using other methods of customizing the Start menu or performing the tasks available from the shortcut menus.

Microsoft recommends enabling this policy to remove shortcut menus from the Start menu, including tasks such as creating a new shortcut.

This policy prevents users from adding the Favorites menu to the Start menu or the Classic Start menu. Use this policy if you do not want users to execute Internet Explorer.

The Favorites menu does not appear on the Start menu by default, but this policy disables the Favorites link. This setting only affects the Start menu. The Favorites menu still exists in Windows Explorer and Internet Explorer.

This policy removes the Help link from the Start menu.

Microsoft recommends enabling this policy to prevent users from easily viewing System Information about the Terminal Server.

Enabling this policy removes the Run command from the Start menu, New Task from Task Manager, and blocks users from typing a UNC path, local drive, and local folders into the Internet Explorer Address bar. Also, users with extended keyboards cannot display the Run dialog box by pressing Windows+R.

This policy removes the Network icon from the Start menu.

Microsoft recommends enabling this policy to prevent easy access to browsing the network.

This policy adds the Log Off <user name> item to the Start menu and prevents users from removing it. This policy affects the Start menu only. It does not affect the Log Off item on the Windows Security dialog box that appears when you press CTRL+ALT+DEL or CTRL+ALT+END while using a key board connected to a Terminal Server client computer.

This policy prevents users from performing the following commands from the Start menu or Windows Security screen: Shut Down, Restart, Sleep, and Hibernate. This policy does not prevent users from running programs to shut down Windows.

Microsoft recommends enabling this policy to help remove confusion for the users and prevent administrators from shutting down the system while it is in production.

This policy prevents users from customizing the taskbar and the Start menu. It can simplify the desktop enforcing the configuration set by the administrator.

Microsoft recommends enabling this policy to restrict the ability to add other applications to the Start menu by browsing or typing the location of an application.

This policy hides the menus that appear when you right-click the taskbar and items on the taskbar, such as the Start button, the clock, and the taskbar buttons.

Microsoft recommends enabling this policy to prevent potential access to files and applications by starting Windows Explorer or Search.

When this policy is enabled, the Start menu displays the classic Start menu that Windows 2000 displays and the following standard desktop icons: Documents, Pictures, Music, Computer, and Network.

When this policy is disabled, the Start menu only displays the latest UI style, which displays the desktop icons on the Start page.

This policy hides the Properties option of the context menu for the Documents icon.

Microsoft recommends enabling this policy if shortcut menus are not disabled and you do not want users to easily view or edit the location of their Documents folder.

This policy hides the Properties option when the user right-clicks My Computer or clicks Computer and then goes to the File menu. Users also cannot use the ALT+ENTER key combination to display this option when Computer is selected.

This policy removes the Properties option from the Recycle Bin context menu.

Microsoft recommends enabling this policy if context menus are not disabled and you do not want users to easily view or change Recycle Bin settings.

This policy only affects the desktop icon. It does not prevent users from connecting to the network or browsing for shared computers on the network with other methods.

Microsoft recommends enabling this policy to remove easy access to browsing the network for applications.

This policy removes the Internet Explorer icon from the desktop and the Quick Launch bar on the taskbar. Microsoft does not recommend enabling this setting as it does not prevent the user from starting Internet Explorer by using other methods.

This policy prevents users from changing the path to their profile folders. By default, a user can change the location of their individual profile folders, such as Documents, Music, and so on by typing a new path in field for this on the Locations tab of the folder's Properties dialog box.

Microsoft recommends enabling this policy to prevent browsing for applications.

This policy removes icons, shortcuts, and other default and user-defined items from the desktop, including Recycle Bin, Computer, and Network. Removing icons and shortcuts does not prevent the user from using another method to start the programs or opening the items they represent. Therefore, Microsoft does not recommend enabling this setting. User can still save and open items on the desktop by using the Common File dialog box or Windows Explorer. However, the items do not display on the desktop.

This policy removes most occurrences of the My Documents icon. It does not prevent users from applying other methods to gain access to the contents of the My Documents folder. Therefore, Microsoft does not recommend enabling this setting.

This policy hides the Computer icon from the desktop and from the new Start menu. It also hides links to Computer in the Web view of all Explorer windows, and it hides Computer in the Explorer folder tree pane. If the user navigates into Computer by using the Up icon when this setting is enabled, an empty Computer folder displays.

Microsoft recommends enabling this policy to present users with a simpler desktop environment from using this icon, and remove easy access to Computer Management and System Properties by no longer allowing users to right-click the icon.