Link to home
Start Free TrialLog in
Avatar of jasonsas
jasonsas

asked on

Disabling shutdown in Terminal Services

HI,
We are currently running a Windows 2003 server with Terminal services installed. This is a stand alone machine and as such is not a domain controller and does not have active directory installed. Is there a way to disable the shutdown option when a user logs in to terminal services?
Thanks
Avatar of karel_jespers
karel_jespers

first one question:
do you need to avoid user shutting down your member terminal server
or
do you need to avoid that users shutdown their terminal server client workstation
is your terminal server member server part of an active directory domain
Avatar of Adam Leinss
Go into the admin tools>local security policy and remove the shutdown right for users.
Avatar of jasonsas

ASKER

It's not part of an active directory domain, it just acts as a server in a workgroup, as we run a netware network.

I have gone into local security policy>User Rights Assignment>Shutdown the system and only "Administrators" are listed there. the problem is that when I log into terminal services as a user who is NOT in Administrators, they still have the shutdown system.

Thanks
The reason we run terminal services on our server is that certain users need to login to this server to run a program that they can only run on the server. I need to be able to stop them from shutting down the server when they log into the server via Terminal Services.
Add Logoff to the Start Menu
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

This could be further strengthened by removing Shutdown from the start menu and CTRL-ALT-DEL box

Disable and remove the Shut Down command
User Configuration\AdministrativeTemplates\Start Menu & Taskbar

Description
Prevents users from shutting down or restarting Windows.

This policy removes the Shut Down option from the Start menu and disables the Shut Down button on the Windows Security dialog box that appears when you press CTRL+ALT+DEL.

This policy prevents users from using the Windows user interface to shut down the system, although it does not prevent them from running programs that shut down Windows.
ASKER CERTIFIED SOLUTION
Avatar of karel_jespers
karel_jespers

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Use GPEDIT.MSC
 
expand user configuration
expand administrative templates
choose start menu/taskbar

in the right hand pane choose "disable and remove shutdown" and enable it
Well thats just plainly the wrong answer

tks a lot and good luck
karel_jespers just an FYI, what you suggested stops REMOTE (users on a seperate system) from Remotely shutting down the terminal server, the question was about locally logged on users on a terminal server shutting it down. My solution fix's that problem, yours doesn't.
when a user logs in to terminal services?

do you think that means local logon?
Yes they are logging on to a local session on the terminal server.
try yours, try mine, i support 30+ terminal servers, i have had this same problem
perhaps jaconsas can explain you why your fix (that of course helped you a lot) isn't the fix he was waiting for

over and out