Re: Rights/group membership for minimal admin tasks

Hi,

Thanks for updates.

>From your description, it seems you want to deploy a policy to disable the
start menu on clients when logon. You can use the group policy to complete
this goal:

You can create a new group policy and only apply the policy to that user on
SBS domain, please change the policy setting on the following key as you
need:

User configuration->Administrative templates->Start menu and Task bar,

Change the setting as you need then run gpupdate to refresh the policy and
logon with that user to see if the policy is applied.

As you refer to the logon script, by default the logon script will
disappear from the task menu, if all the command have been finished on
logon script, so please check you script to make sure of it.

Thanks for your understanding, if you have any further concerns, please let
me know. I am glad to be any further updates. Your satisfaction is our top
goal.

Best regards,

Charles Yang (MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Remote Client Configuration
    ... > Thanks for quickly updates. ... > group policy will not be updates, instead it will use the old policy that ... > will be applied after the user logon in order to reduce the logon process. ... > laptop to connect to SBS domain first; currently we have no other better ...
    (microsoft.public.windows.server.sbs)
  • RE: Cant set Local Security policies. They fail to save
    ... predefined Security Template on SBS 2003 to restore security groups ... run "gpupdate.exe /force" under command prompt to force the policy ... reboot the Server to test. ... and then logon to client computer to test if user can save system logs. ...
    (microsoft.public.windows.server.sbs)
  • RE: Event ID 537 and Kerberos
    ... a logon type of 3 translates to Network. ... Click Services tab and select Hide All Microsoft Services and Disable ... Step 4: Configure account lockout policy. ... and then click Account Lockout Policy. ...
    (microsoft.public.windows.server.sbs)
  • Re: Remote Client Configuration
    ... Thanks for quickly updates. ... Just as I know, if you only logon the domain with cache credential, the ... group policy will not be updates, instead it will use the old policy that ... dial up VPN connection to logon SBS domain once-in-a-while for the group ...
    (microsoft.public.windows.server.sbs)
  • RE: Remote Desktop not working after SP1
    ... "The local policy does not permit you to logon interactively" error message ... Remote Desktop Users ... Use the ISAinfo utility to collect the ISA configuration information: ...
    (microsoft.public.windows.server.sbs)