When you’re using a Service Based Computing environment (for example Microsoft Remote Desktop Services) based on Windows Server 2012 R2 or Server 2016, all the users have access to the ‘right-click’ menu on the Windows button.
It’s very easy to delete some options from the ‘right-click’ menu, for example by using Group Policy Preferences.
The default location is:
C:\Users\Default\AppData\Local\Microsoft\Windows\WinX
There’re three folders inside this folder, Group1, Group2 and Group3. All of these folders have there own shortcuts. In this example I only want users to have access to ‘Bureaublad’ or ‘Desktop’. So I only need to remove ‘Group2’ and ‘Group3’.
1.) First of all start the Group Policy Management Console
2.) Create a new GPO
3.) Navigate to Computer Configuration / Preferences / Windows Settings / Folders
4.) Add two new items. Action: Delete
C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group2
C:\Users\Default\AppData\Local\Microsoft\Windows\WinX\Group3
5.) Enable all five options
6.) Close the Group Policy Management Editor and link the GPO to the Organization Unit within the Active Directory.
7.) Send a ‘gpupdate /force’ command to the RDS servers and reboot the servers
8.) After the reboot, the ‘right-click’ menu is almost empty
