A. There are a couple of options open to you:
1. Set the protections on the folder and its contents so only members of the Administrative group can read/execute it. This will only work if the boot partition is NTFS
- Start Explorer
- Move to %systemroot%\Profiles\All Users\Start Menu\Programs
- Select "Administrative Tools (Common)" and select Properties from the File menu (or Right click the file and select properties)
- Click the Security tab
- Click the Permissions button
- Select "Everyone" and click Remove
- Click Add and select "Domain Admins" click Add and select Access to "Full Control". Click OK
- Back in the "Directory Permissions" dialog box click OK
Non-administrative users will now see an empty "Administrative Tools" menu. You could select different users if you wish.
2. You could also just move the Administrative Tools folder from the All Users section to a specific account area on the machine. There may be complications with roaming profiles etc.
The methods above just hide the items from the menu, however users could still run the applications from Run, however the operating system prevents unauthorized users altering the system using these tools so that is not a problem (you could always set the protections on the images as well if you don't want users to run them).