Setting Up Desktop and Application Pools in View

RDS Remote Session Environment Settings
he RDS Remote Session Environment group policy settings control configuration of the user interface in
Remote Desktop Services sessions.
Table 16‑13. RDS Remote Session Environment Group Policy Settings
Setting Description
Remove Windows Security item from Start menu
Specifies whether to remove the Windows Security item from
the Settings menu on Remote Desktop clients. You can use
this setting to prevent inexperienced users from logging off
from Remote Desktop Services inadvertently.
If the status is set to Enabled, Windows Security does not
appear in Settings on the Start menu. As a result, users must
type a security attention sequence, such as CTRL+ALT+END,
to open the Windows Security dialog box on the client
computer.
If the status is set to Disabled or Not Configured, Windows
Security remains in the Settings menu.
RDS Security Settings
The RDS Security group policy setting controls whether to let local administrators customize permissions.
Table 16‑14. RDS Security Group Policy Settings
Setting Description
Do not allow local administrators to
customize permissions
Specifies whether to disable the administrator rights to
customize security permissions in the Remote Desktop
Session Host Configuration tool.
You can use this setting to prevent administrators from
making changes to the user groups on the Permissions tab in
the Remote Desktop Session Host Configuration tool. By
default, administrators are able to make such changes.
If the status is set to Enabled, the Permissions tab in the
Remote Desktop Session Host Configuration tool cannot be
used to customize per-connection security descriptors or to
change the default security descriptors for an existing group.
All of the security descriptors are Read Only.
If the status is set to Disabled or Not Configured, server
administrators have full Read/Write privileges to the user
security descriptors on the Permissions tab in the Remote
Desktop Session Host Configuration tool.
NOTE The preferred method of managing user access is by
adding a user to the Remote Desktop Users group.
Chapter 16 Configuring Policies for Desktop and Application Pools
VMware, Inc. 245