locked
Visibility Administrative Tools RRS feed

  • General discussion

  • Hi, we have an AD with several thousand users and we have the following problem.

    We have restricted the users so that they cannot change the settings for taskbar and start menu trough an GPO.

    Now we do want to give them the option to change the taskbar settings, this also comes with the option to change the start menu. No worries so far, through the same GPO I took away most of the menu items we don’t want to show. But the administrative tools option is the only one we can’t remove from that setting list.

    So I have written 2 ADM files based upon the reg settings that you give here(see below).
    They hide the administrative menu just fine, but and this is my biggest problem, they still can make it visible again through the start menu options.

    Now here is the pickle, is there a way to completely hide it from the users without changing the image we use?

    Start of ADM file1:
    CLASS USER
    CATEGORY "Start Menu Administrative Tools(CustomADM)"
    POLICY "Remove Administrative Tools from Start Menu"
    EXPLAIN !!ADMHelp
    KEYNAME Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    PART !!ADM_Configure DROPDOWNLIST REQUIRED
    VALUENAME "Start_AdminToolsRoot"
    ITEMLIST
    NAME !!ADMoff VALUE NUMERIC 0 DEFAULT
    NAME !!ADMon VALUE NUMERIC 1
    END ITEMLIST
    END PART
    END POLICY
    END CATEGORY

    [strings]
    ADM_Configure="Set the Administrative Tools to:"
    ADMoff="Hidden"
    ADMon="Visible"

    ; explains
    ADMhelp="Set Administrative Tools to be shown or hidden on the Start Menu."


    Start of ADM file2:

    CLASS USER
    CATEGORY "All Programs Administrative Tools(CustomADM)"
    POLICY "Remove Administrative Tools from All Programs"
    EXPLAIN !!ADMHelp
    KEYNAME Software\Microsoft\Windows\CurrentVersion\Explorer\Advanced
    PART !!ADM_Configure DROPDOWNLIST REQUIRED
    VALUENAME "StartMenuAdminTools"
    ITEMLIST
    NAME !!ADMoff VALUE NUMERIC 0 DEFAULT
    NAME !!ADMon VALUE NUMERIC 1
    END ITEMLIST
    END PART
    END POLICY
    END CATEGORY

    [strings]
    ADM_Configure="Set the Administrative Tools to:"
    ADMoff="Hidden"
    ADMon="Visible"

    ; explains
    ADMhelp="Set Administrative Tools to be shown or hidden in All Programs."

    • Changed type Karen Hu Monday, November 18, 2013 1:34 AM not correct forum
    Wednesday, November 6, 2013 2:58 PM

All replies

  • Hi,

    For issue about AD, we’d recommend you ask AD forum for professional solution:

    http://social.technet.microsoft.com/Forums/windowsserver/EN-US/home?forum=winserverDS

    The reason why we recommend posting appropriately is you will get the most qualified pool of respondents, and other partners who read the forums regularly can either share their knowledge or learn from your interaction with us. Thank you for your understanding.

     


    Karen Hu
    TechNet Community Support

    Thursday, November 7, 2013 9:31 AM