Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Since normal users don't have privileges to modify system service settings, e.g. DNS, is it possible to hide the Administrative Tools for them but those people in Domain Admins still have privileges to see it?

share|improve this question

Best way to do it that I know of is to use GPOs to define a Start Menu that doesn't contain the Administrative Tools tree for those users you want to "hide" it from. They'll still be able to get at it through the MMC, but odds are they won't know how or want to be bothered with that.

User Configuration --> Preferences --> Control Panel Settings --> Start Menu

GPME Start menu

The other, hackier way would be to mess with the permissions on the item in question. For Windows Vista and up, it's at C:\ProgramData\Microsoft\Windows\Start Menu\Programs\, and you could change who has read permissions to the "Administrative Tools" directory tree there. Presumably via script if you want to do it for a bunch of computers.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.