[User Configuration\Administrative Templates\Windows Components\Task Scheduler]
• Hide Property Pages
Recommended setting: Enabled
It is recommended that you enable this policy to prevent users from viewing and changing the properties of an existing task.

• Prohibit Task Deletion
This policy prevents administrators from deleting tasks from the Scheduled Tasks folder. This does not prevent administrators from deleting tasks with the AT command, or from a remote computer.

• Prevent Task Run or End
This policy prevents administrators from starting and stopping tasks.

• Prohibit New Task Creation
Recommended setting: Enabled
It is recommended that you enable this policy to prevent users from creating new scheduled tasks and browsing for applications. This does not prevent administrators from creating new tasks with the AT command, or from a remote computer.

[User Configuration\Administrative Templates\Windows Components\Windows Messenger]
• Do not allow Windows Messenger to be run
Recommended setting: Enabled
This policy disables Windows Messenger for the user. It is recommended that you enable this policy to prevent users from receiving links or files from other Windows Messenger users.

[User Configuration\Administrative Templates\Windows Components\Windows Update]
• Remove access to use all Windows Update features
This policy removes access to Windows Update. If you enable this setting, all Windows Update features are removed. This includes blocking access to the Microsoft Windows Update Web site at http://go.microsoft.com/fwlink/?LinkId=18539, from the Windows Update hyperlink on the Start menu, and also on the Tools menu in Internet Explorer. Windows automatic updating is also disabled; you are neither notified about critical updates nor do you receive critical updates from Windows Update. This setting also prevents Device Manager from automatically installing driver updates from the Windows Update Web site. This policy can be used to prevent changes to the Terminal Server while it is production. If you disable Windows Update, you should schedule periodic checks to ensure Windows has latest critical updates.

[User Configuration\Administrative Templates\Start Menu & Taskbar]
• Remove links and access to Windows Update
Recommended setting: Enabled
This policy removes links and access to the Windows Update Web site. The Windows Update Web site is only available for administrators. It is recommended that you enable this policy to remove easy access to Internet Explorer for users.

• Remove pinned programs list from Start Menu
This policy removes the Pinned Programs list from the new Start Menu. It also removes the default links to Internet Explorer and Outlook Express if they are pinned, and it prevents users from pinning any new programs to the Start Menu. The Frequently Used Programs list is not affected.

• Remove programs on Settings menu
Recommended setting: Enabled
This policy removes Control Panel, Printers, and Network Connections from Settings on the Classic Start menu, My Computer and Windows Explorer. It also prevents the programs represented by these folders (such as Control.exe) from running. However, users can still start Control Panel items by using other methods. It is recommended that you enable this policy to prevent easy access to viewing or changing system settings.

• Remove Network Connections from Start Menu
Recommended setting: Enabled
This policy prevents the Network Connections folder from opening. The policy also removes Network Connections from Settings on Start Menu. Network Connections still appears in Control Panel and in Windows Explorer, but if users try to start it, a message appears explaining that a setting prevents the action. It is recommended that you enable this policy to prevent users from creating new connections such as VPN or Dial-up.

• Remove the Search menu from Start Menu
Recommended setting: Enabled
This policy removes the search function from the Start menu. This setting removes Search from the Start menu and from the shortcut menu that appears when you right-click Start Menu. Also, the system does not respond when users press Windows+F or the F3 key. In Windows Explorer, the search item still appears on the Standard buttons toolbar, but the system does not respond when the user presses CTRL+F. Also, Search does not appear in the shortcut menu when you right-click an icon representing a drive or a folder. This setting affects the specified user interface elements only. It is recommended that you enable this policy to prevent users from easily searching for applications that they are not assigned to them.

• Remove Drag-and-Drop shortcut menus on Start Menu
Recommended setting: Enabled
This policy prevents users from using the drag-and-drop method to reorder or remove items on the Start menu. This setting does not prevent users from using other methods of customizing the Start menu or performing the tasks available from the shortcut menus. It is recommended that you enable this policy to remove shortcut menus from the Start menu, including tasks such as creating a new shortcut.

• Remove Favorites menu from Start Menu
This policy prevents users from adding the Favorites menu to the Start menu or the Classic Start menu. Use this policy if you do not want users to execute Internet Explorer.

• Remove Help menu from Start Menu
Recommended setting: Enabled
This policy removes the Help link from the Start menu. This setting only affects the Start menu. To disable the new Help and Support application disable the service in Computer Configuration (See Restricted Computer Policies). It is recommended that you enable this policy to prevent users from easily viewing System Information about the Terminal Server.

• Remove Run menu from Start Menu
Recommended setting: Enabled
It is highly recommended that you enable this policy to prevent users from attempting to execute any application. This is very critical for locking down the Terminal Server. Enabling this removes the Run command from the Start menu, New Task from Task Manager, and users are blocked from entering a UNC path, local drive, and local folders into the Internet Explorer address bar. Also, users with extended keyboards can no longer display the Run dialog box by pressing Windows+R.