Enable Quicklaunch toolbar and Clock for Terminal Server users

To enable the clock and Quicklaunch bar we need to make sure the following GPO are set as follows:

User Configuration > Administrative Templates > Start Menu and Taskbar
DISABLE: Do not display any custom toolbars in the taskbar (This allows the user to activate the QL bar and others if needed - does not turn it on)
DISABLE: Hide the notification area
ENABLE: Prevent changes to Taskbar and Start Menu Settings
DISABLE: Remove Clock from the system notification area (This setting allows user to turn the clock on - does not actually turn it on)

Right, from a GPO point of view the user should be able to see the QL bar and clock. However you may find that neither the clock nor the QL bar is displayed. To force them to be displayed we need to do the following:

Export the following registry key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\StuckRects2

You'll see a "Settings" value, which contains something like this:
28 00 00 00 ff ff ff ff 02 00 00 00 03 00 00 00 6d 00 00 00 20 00 00 00 00 00 00 00 e0 03 00 00 00 05 00 00 00 04 00 00

The nineth pair of digits determines the Taskbar properties. Possible values are:
Always on top = 0x02
Auto hide = 0x01
Show small icons in Start menu = 0x04
Hide clock = 0x08

Combine the properties you want and set the byte. For example:
Always on top + Show small icons + Show clock = 06
Always on top + Show small icons + Hide clock = 0e

Note that the changes do not take effect immediately, you have to restart Explorer, or logoff and logon again to see the changes.

I set it to 02 (Allways on top)

Save this to a .reg file in NETLOGON

Next for the QL bar:

Logon to admin and make sure the QL bar is active
Export the following key:
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer\Streams\Desktop

to another .reg file in NETLOGON

Next we need to create a user LOGOFF script GPO and link it to the relevant user accounts. The script should push the required registry settings on logoff (we need explorer to be closed for the settings to remain as explorer updates these keys on closing and reads them only at startup)

The script should "regedit /s file.reg" the reg files created above this will add the keys silently.

The settings should apply the next time on user logon after the script as run.