I wonder if it's possible to disable the metro completely on a Windows server 2012 RD Session host, preferably through group policies.
I need to do this because I haven't figured out a way to lock down all the administrative tools that the users should not be able to run (or see).
I have removed them from startmenu by deleteing the C:\programdata\Microsoft\Windows\Start Menu\Programs\Administrative Tools but if a user searches for a program in the application list of metro, he can still run it…
Any ideas? Tried to google it.
Best Answer
No, you can't disable Metro in 2012. MS has decided tghat this was the new UI and you have no choice about that.
However, for your specific problem, it shouldn't be an issue: unless you've given your users more rights than they should have, they might see some admin tools but they won't be able to use them to affect anything but their own environment.
For instance, unless you've disabled it by GPO, regular users can still see (and start) regedit but they will be unable to modify any of the keys in the HKLM hive and won't be able to see some of them at all.