I have a Server 2008 R2 Foundation Edition. It is a DC and I have created an OU that will contain my terminal services users. I need to use Group Policy to lock down the terminal service users envirnoment. I have pretty much everything locked down, but they can still see Administrative Tools.
I have tried using the "Hide specified Control Panel items" and put in "Administrative Tools" in that list, but that did not work. What EXACTLY do I need to do to use a Group Policy to remove the "Administrative Tools" link from the right side of the Start Menu?
Also, is there a way to remove "Lock" from the extended "Log off" menu?