This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(284.8, 27%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESR%3C/text%3E%3C/svg%3E)
I have a pool of Windows 10 VMs and want to put the type of user controls like we would do with a GPO. For example how to disable Task Manager and Control Panel for non admin users. Where and how do I configure this without an server and GPO?
Can this be done somewhere in the Azure portal?
Standard User can't open task bar, UAC is prompted.
For controlling policies in AVD, you have 2 options;
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(185.6, 22%, 27%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ED%3C/text%3E%3C/svg%3E)
Hi, I have same issue, a standard user who have access to only application is able to launch cmd using shortcuts. I need to block this behavior.
if we choose one of those 2 solutions, should we install the Azure AD service?
You refer to a "standard user" I assume you mean a non admin? In my VMs these normal users have no access to gpedit as we would like, but do have access to task manager and cmd prompts. GPO with a DC in Azure is the only way to lock down a VM?
Hi, yes,
it is non admin user. Actually, I pressed ctrl+alt+end in the remote app and it opens the task managers and from it I launched a cmd. and I need to prevent non admin used to do it.
Hi @Shoemaker, Robert ,
You can try to find these options in Local Policies -> gpedit
Local Computer Policy > User Configuration > Control Panel
for task manager:
Configuration > Administrative Templates > System > Ctrl + Alt + Del Options
If it helped please click upvote or accept as answer.
If possible I would prefer to do this at a higher level not on the individual VM
It's impossible from the Azure console and you don't have AD DS so you could create powershell script and automate the process.