"Access is denied." when using shutdown.exe on XP.

BTW on the machine that you get this error message check your Event logs to see what they have to say.

START | RUN | EventVwr.MSC

shutdown.exe copied from XP to 2K
I am running it on 2K in order to shutdown the XP.

Forget about it. I tested it with 2 XP machines.
Every time I'm running this command I'm getting "Access is denied.".

There are no entries in the Event Viewer related to this...

You may also want to try adding the -l switch which will log off the currently logged on user:

SHUTDOWN -l -r -f -m \\salsa

Log off (cannot be used with -m option)

Okay here is my last trick:

START | RUN | COMPMGMT.MSC  (ON THE W2K Machine)
Right Click on "Computer Management (Local)"
Select "Connect to another computer"
Type in SALSA
Right CLick on "Computer Management (SALSA)"
Select Properties
Click on the Advanced Tab
Click on the "Settings" button in startup and recovery panel
Click the "Shut Down" Button.

Right CLick on "Computer Management (SALSA)"
Select Properties ->
and the following error message appear:

---------------------------
System Properties
---------------------------
Win32: Access is denied.
---------------------------
OK  
---------------------------

Are the two machines in a domain or a workgroup?

Really sounds like there is some kind of trust issue going on between these two machines.

In your network properties on the two machines do you have:
Microsoft Client for Networks?
File and printer Sharing?
TCP/IP?

Are you using local machine administrative rights or domain admin rights?

Both XP machines are in the Workgroup.
Microsoft Client for Network,
File and printer Sharing for Microsoft Networks,
QoS packet Scheduler
and Internet Protocol TCP/IP services are installed on both machines.
Local machine administrative rights are used.

Okay. What about services packs.
go to the windows update site with both machines and make sure they both have the most recent service packs installed. I remember now reading something about this problem. Update W2K to SP3 if it isn't already updated. I'll try to find the post i read.

http://v4.windowsupdate.microsoft.com/en/default.asp

I am using both XP+SP1.
Update is configured for every night scan.

I thought you said you were on a W2K machine trying to shut down an XP machine:
>>Comment from asssa
>>Date: 10/03/2003 07:13PM EST  Author Comment  
>>shutdown.exe copied from XP to 2K
>>I am running it on 2K in order to shutdown the XP


FIX: ICOMAdminCatalogCollection::Populate Fails with "Access Denied" Error on Simultaneous Calls

http://support.microsoft.com/default.aspx?scid=kb;en-us;291941
Complete list of SP3 Fixes:
http://support.microsoft.com/default.aspx?scid=%2fsupport%2fServicePacks%2fWindows%2f2000%2fSP3FixList.asp

Yes, but later ...

Comment from asssa
Date: 10/03/2003 05:13PM PDT  Author Comment  

shutdown.exe copied from XP to 2K
I am running it on 2K in order to shutdown the XP.

Forget about it. I tested it with 2 XP machines.
Every time I'm running this command I'm getting "Access is denied.".
 

Try this asssa:

http://www.sysinternals.com/ntw2k/freeware/psshutdown.shtml

asssa: just make sure that all of your machines have the same username/password combination for the administrator.

Make sure you don't have the XP fire wall running:
Right Click on "Lan Connection" in Network Properties
Select Advanced Tab. Remove the Check which turns on the XP Firewall.

asssa??

Hi,
the same result with psshutdown.
User names/passwords are the same.
Firewall is turned off.

That being the case, you have an unresolved permissions issue causing the problem. psshutdown works when nothing else will.

Do you now how to resolve "permissions issue" ?

Try passing the password with this format:

username = computername\username
password = ********


where computername is the computer name of the computer you are trying to shut down.

The same result.
I added another user with administrator privileges and shutdown.exe works.
So, I can't use the same user to shutdown the machine.
Do you know something about limitations to log in with the same user on XP (workgroup) ?

Ok, i did find the reason for this problem and solution:
.
There is a "ForceGuest" key in the regestry which is set to "1" (enabled). It means that all the
connection coming from "the network" will be authenticated as the Guest User.
For WinXP, the ForceGuest setting is enabled by default when in WORKGROUP mode
(not domain) and gives access problems for WMI connections and shares access,
other DCOM services and RPC services as well.
Note that for WinXP Home you cannot disable the ForceGuest behavior (only in
WinXP Pro).

see http://www.derkeiler.com/Newsgroups/microsoft.public.windowsxp.security_admin/2003-02/2268.html
for more details.
I changed the key value in the registry and ... yes, it works !
And shutdown.exe works as fine as psshutdown.exe.

Then it is a permissions issue, for local security policies.

According to the Resource Kit for XP, by default, on computers running Windows XP Professional and not joined to a domain, all incoming network connections are forced to use the Guest account. This means that an incoming connection, even if a user name and password is provided, has only Guest-level access to the share. Because of this, either the Guest user account or the Everyone group (the only group to which the Guest account belongs) must have permissions on the share and on the directories and files that are shared. It also means that, in contrast to Windows 2000, you do not need to configure matching user accounts on computers to share files. Because Windows XP Professional supports Anonymous connections, and because it severely limits the use of the Everyone group in file system permissions, granting the Everyone group access to shared folders does not present the security problem that it does on Windows 2000–based computers.

ForceGuest is enabled by default, but can be disabled on Windows XP Professional by disabling the local security policy Network Access: Force Network Logons using Local Accounts to Authenticate as Guest. By contrast, on Windows XP Professional–based computers joined to a domain, the default sharing and security settings are the same as in Windows 2000. Likewise, if the ForceGuest policy setting on a Windows XP Professional–based computer not joined to a domain is disabled, then the computer behaves as in Windows 2000.

asssa I'm glad you posted the solution. Now you should copy this link and in the community support section of this web site paste the link and request that this question be PAQ'd and your points refunded.


http://www.experts-exchange.com/Community_Support/askQuestion.jsp

Thanks a lot, gemarti.

What BS, if I hadn't identified the fact that it was a permissions issue you wouldn't have had a clue where to look.

Bravo, dew_associates,
what a perspicacity !
Access is denied .... Hm-m.. "... it is a permissions issue ..."
Well done!

It was a permissions issue from the beginning.

You added 3 very "valuable" comments:
First was suggestion to use psshutdown.
Second - you just called me by my nick-name.
Third (which was AFTER I posted full solution) was simply cuted and pasted from the
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/reskit/prde_ffs_ypuh.asp

So, please... be an expert.
Gemarti, thanks again!!!


Thank you for your help !

Your time will come!

Would it be possible for you to just get up, walk to the other computer and just go START/SHUT DOWN? or maybe pressing the button on the computer? Or even tuning it off at the plug(even though it isn't very healthy for the computer)? or maybe turn all of your power off at the mains? Either way, the computer still shuts down!!!