Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Since normal users don't have privileges to modify system service settings, e.g. DNS, is it possible to hide the Administrative Tools for them but those people in Domain Admins still have privileges to see it?

share|improve this question

1 Answer 1

Best way to do it that I know of is to use GPOs to define a Start Menu that doesn't contain the Administrative Tools tree for those users you want to "hide" it from. They'll still be able to get at it through the MMC, but odds are they won't know how or want to be bothered with that.

User Configuration --> Preferences --> Control Panel Settings --> Start Menu

GPME Start menu

The other, hackier way would be to mess with the permissions on the item in question. For Windows Vista and up, it's at C:\ProgramData\Microsoft\Windows\Start Menu\Programs\, and you could change who has read permissions to the "Administrative Tools" directory tree there. Presumably via script if you want to do it for a bunch of computers.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.