Hiding the "Run" start menu item for non-administrators

[S.]

Hi,

I want to hide the "Run" start menu item for
non-administrators only on my Windows 2000 terminal server.
I want it to be still available for the administrator to
use from the start menu.

I know I can hide it for all users using regedit.exe and
gpedit.msc , however this is not what I require.

Any ideas?? If it's easy, then I would appreciate tips on
achieving the same affect for the Control Panel and System
Drives as well (but only for non-administrators again!).

Thanks.
Steve

 

[nerd32768]

The best way to solve this problem is to make an OU for all of the non
administrators. Right click on the OU, and go to properties. In the
Properties dialog box, go to Group Policy. click on NEW. name the policy
whatevery you want. click on the policy, and the click on EDIT. you then
have a gpedit.msc window, but it wil only affect your selected OU.

 

[Vera Noest [MVP]]

What you need are two things:

1) use loopback processing of the policy to prevent it from
affecting both your domain logon on the client and your TS session
logon (this applies to all users)
260370 - How to Apply Group Policy Objects to Terminal Services
Servers
http://support.microsoft.com/?kbid=260370
231287 - Loopback Processing of Group Policy
http://support.microsoft.com/?kbid=231287

2) make sure that restrictions are not affecting administrators:
you do this by making sure that Administrators have "Deny" for the
right to "Apply this policy" in the permissions tab of the GPO.
315675 - HOW TO: Keep Domain Group Policies from Applying to
Administrator Accounts and Selected Users in Windows 2000
http://support.microsoft.com/?kbid=315675

Here are more useful lockdown settings, like hiding drives and
Control Panel:
278295 - How to Lock Down a Windows 2000 Terminal Services Session
http://support.microsoft.com/?kbid=278295

 

[S.]

Vera,
That is excellent.
Thanks, Steve