Every users needs to have the Computer icon on the desktop, but when you allow right clicking to see the context menu the users will also find the Manage button. All though the user can’t use the mmc, i don’t want them to see the option at all.
Make a change to the Registry by using a GPO
Open your RDS Server Machine Policy and expand the following folders:
Computer Configuration, Policies, Windows Settings, Security Settings, Registry
Right click and choose Add Key
Copy and paste the following key:
In the security screen for one of the files you’ll have to remove the Creator Owner and Users Group , which will leave the System and Administrator group left.
Click on OK
Leave default settings and click OK
And you’re all set !
More tips and tricks can be found on my Remote Desktop services 2008R2 page.