Chipa's Stuff

How to remove those rotten shortcuts for standard users. I might have some of these .lnk files wrong as I’m typing this up from some older notes, but this should get you started.

Create new GPO –
Goto:

Computer Configuration > Policies > Windows Settings > Security Settings > File System -> Add File..

Add these entries –

C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Server Manager.lnk
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell.lnk
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories\Windows PowerShell\Windows PowerShell (x86).lnk
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Administrative Tools\Windows PowerShell ISE.lnk
 C:\ProgramData\Microsoft\Windows\Start Menu\Programs\System Tools\Windows PowerShell.lnk

Remove Creator Owner and Users from the permissions.

Create an OU and move the RD servers to it. Assign your new GPO there.

Now any new standard user will not have permission to read the .lnk files, cannot make a copy and therefore does not end up with the shortcuts on the taskbar.

NOTE: This will only work for NEW users, any users who have already logged onto the RDS server will not benefit from this.