To give your users a little more control over their computer, The LPM Helper Tools allow the administrator to give the end-user power over printers, network connections and the ability to uninstall applications.

This article will explain the process of adding the helper to the Windows Start Menu – Left and/or right side.

For more information on the Helper Tools, click HERE.

To enable the helper tools and give the power to the users, click HERE, and follow the directions. The helper tool must be enabled to work.

Adding the LPM Helper Tools to the Right Start Menu

For this side, Start Screen Manager will be used to place the icons.

1. Open the GPMC on your management station and create a new GPO where desired and edit it
   
   (Note: This can also be added as part of the Least Privilege Manager policy GPO used to enable the helper tools)
2. Expand User or Computer Configuration -> PolicyPak -> Windows 10 & Server Management and click on Start Screen Manager

(this example will use the user configuration)

3. Add a new Collection
   

   

4. Name the Collection and under Layout Mode, select either Full (Replacement of the user’s start menu) and Partial (Preserving the user’s start menu). Partial Preserve is generally recommended as the end users still have access to modify the rest of the start menu.
   

   

(Note: Item Level Targeting may be used to filter who or what gets the policies within this collection)

5. Open the collection and add a New Group
   

   

6. Complete Group information
   1. Group Name: The title of the group that will appear on the end user’s start menu
   2. State: Enabled
   3. Action: choose between Create, Replace and Update
      1. The default, and recommended here, is to “Update” any existing group and check “Create if not present”
   4. Update Mode: If Update is the selected action, and the group name you selected already exists, do you want to new icons at the top or tail of the group?
   5. Placeholder: If an application / link is missing and the tile cannot be created, do you want a Gap in its place, or an Edge Link (a tile that will open in the Edge Browser)?
      

      

(Note: ILT can also be implemented here instead of at, or in addition too, the collection level)

7. Open the new group just created
8. Add new Desktop Application
   

   

9. Select Custom Application
   

   

10. Click “Select application” and browse to “C:\Program Files\PolicyPak\Least Privilege Manager\Tools” and select one of the three EXEs
    

    

11. Complete Application data page
    1. Shortcut Name: Rename to something descriptive
    2. Shortcut Icon: If path is not complete, click on Change icon… and browse back to EXE directory and select the same file

12. Set icon size and position as desired, if different from default
    

    

13. Confirm settings and Finish
14. Repeat steps 7 through 12 for each Helper Tool needed
    1. Network Connections
    2. Printers
    3. Remove Programs

The changes will be implemented on the User’s computer once Group Policy has been updated (either automatically or manually by running “GPUpdate”, and the user, at minimum, logs off and back on again.

Adding the LPM Helper Tools to the Left (All Applications) Menu

If you have already created tiles on the right start menu, these, and any other tiles you created using Start Screen Manager or Task Bar Manager, will appear in a folder named “PolicyPak Start Screen Manager”. If this is sufficient, you can leave it as is. However, if you had not completed the right-side option above, or would like to separate the icons into their own folder, continue with the process below.

1. Open the GPMC on your management station and create a new GPO where desired or use the GPO for the right-side icons
2. Expand User or Computer Configuration -> Preferences -> Windows Settings and click on Shortcuts
   

   

3. Right-click and create a New -> Shortcut

   

4. Fill in the shortcut properties page as follows
   1. General Tab
      1. Action: Replace
      2. Name: Name of the shortcut, including parent folder (e.g. “PolicyPak LPM Helper Tools\Network Connections” – This is what will be seen in All Apps)
      3. Target type: File System Object
      4. Location: Start Menu
      5. Target Path: Click “…” and browse to “C:\Program Files\PolicyPak\Least Privilege Manager\Tools” and select one of the three EXEs (e.g. C:\Program Files\PolicyPak\Least Privilege Manager\Tools\PolicyPak.Tools.NetworkConnections.exe)
         

         

   2. Common Tab
      1. Check “Remove this item when it is no longer applied”

         

5. Click OK to close the window
6. Repeat steps 3 through 5 for each Helper Tool needed
   1. Network Connections
   2. Printers
   3. Remove Programs

Changes to the Left side are immediate and do not need a log off.