i'm in the process of locking down a Windows 2003 Terminal Services Server. i need to find where to disable "Administrative Tools" from showing in the XP-Style Start Menu. anyone know where this option is?

I had a quick poke around, and I didn't find an administrative template to do this. After I'd thought about this a bit more, since all ofthe admin tools are based on MMC.EXE you actually don't want to disable the start items at all.

It would be better to create a software restriction policy, with a ahash rule for MMC.EXE and apply that to the users on the Terminal servers. Probably best to exlude administrators from this GPO though, otherwise bad things may happen.

Be Warned: I've not attempted this yet, so I've no idea if disabling MMC.EXE will break windows, I shouldn't have thought it would, but you never know..

Hope that helps.

Cheers,

Paul