GPO to restrict users from launching updates icon

  • Thread starter Thread starter Dennis_S
  • Start date Start date
D

Dennis_S

Guest
Hello,

Is there a security policy to restrict users from launching the Updates
alert icon, or even better prevent them from seeing the icon on the terminal
server? A few user are members of the administrator group and sometimes
mistake the terminal server Updates alert icon with their client icon.

Thanks.
 
RE: GPO to restrict users from launching updates icon

Group Policy -> User Configuration -> Administrative Templates -> Windows
Components -> Windows Update -> Remove access to all Windows Update Features.

That being said, if users are administrators, they can alter the OS in just
about any way they want. I'd recommend that you not allow anyone to logon
interactively as an administrator, except when performing administrative
tasks.


--
Patrick C. Rouse
Microsoft MVP - Terminal Server
SE, West Coast USA & Canada
Quest Software, Provision Networks Division
Virtual Client Solutions
http://www.provisionnetworks.com


"Dennis_S" wrote:

> Hello,
>
> Is there a security policy to restrict users from launching the Updates
> alert icon, or even better prevent them from seeing the icon on the terminal
> server? A few user are members of the administrator group and sometimes
> mistake the terminal server Updates alert icon with their client icon.
>
> Thanks.
 
RE: GPO to restrict users from launching updates icon

Group Policy -> User Configuration -> Administrative Templates -> Windows
Components -> Windows Update -> Remove access to all Windows Update Features.

That being said, if users are administrators, they can alter the OS in just
about any way they want. I'd recommend that you not allow anyone to logon
interactively as an administrator, except when performing administrative
tasks.


--
Patrick C. Rouse
Microsoft MVP - Terminal Server
SE, West Coast USA & Canada
Quest Software, Provision Networks Division
Virtual Client Solutions
http://www.provisionnetworks.com


"Dennis_S" wrote:

> Hello,
>
> Is there a security policy to restrict users from launching the Updates
> alert icon, or even better prevent them from seeing the icon on the terminal
> server? A few user are members of the administrator group and sometimes
> mistake the terminal server Updates alert icon with their client icon.
>
> Thanks.
 
RE: GPO to restrict users from launching updates icon

Thanks for the info Patrick. Users being members of the administrators group
is a hold over from way back. They have been removed.

Dennis

"Patrick Rouse" wrote:

> Group Policy -> User Configuration -> Administrative Templates -> Windows
> Components -> Windows Update -> Remove access to all Windows Update Features.
>
> That being said, if users are administrators, they can alter the OS in just
> about any way they want. I'd recommend that you not allow anyone to logon
> interactively as an administrator, except when performing administrative
> tasks.
>
>
> --
> Patrick C. Rouse
> Microsoft MVP - Terminal Server
> SE, West Coast USA & Canada
> Quest Software, Provision Networks Division
> Virtual Client Solutions
> http://www.provisionnetworks.com
>
>
> "Dennis_S" wrote:
>
> > Hello,
> >
> > Is there a security policy to restrict users from launching the Updates
> > alert icon, or even better prevent them from seeing the icon on the terminal
> > server? A few user are members of the administrator group and sometimes
> > mistake the terminal server Updates alert icon with their client icon.
> >
> > Thanks.
 
Back
Top