Windows 2008 R2 Server lockdown for non-admin users accessing server using Remote Desktop. Basics include removing Control Panel, Admin Tools, Command Prompt (and if user type CMD in search should say access denied), Removal of All Program Folders and only access to items on Desktop or Pinned to Start Menu. Other settings also applicable pertaining to best practices in locking down a server desktop. Additionally, re-write of powershell script used by Citrix to lock down desktop so that it may be installed with having Citrix components installed. File is attached as part of ZIP file in New-CtxManagedDesktopGPO.ps1 Expectation is that experienced Windows admin can write powershell script or modify existing powershell script pretty quickly so that it can be deployed on multiple Windows 2008 R2 servers running as Remote Desktops by customer without modification.