Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2070
  • Last Modified:

windows 2000 - Disable shut down for "Users" group

i have a www/ftp server that is used by members of the "Users" group, i need to prevent members of this group from shutting down and restarting the machine. Only administrators need this right. I understand this is done using a group profile. This is new to me, i have never used this feature so specific instructions will be appreciated, as will any help.

s1desh0w :o)
0
s1desh0w
Asked:
s1desh0w
  • 6
  • 2
  • 2
2 Solutions
 
chadCommented:
Hi s1desh0w,
This could be done in group policy in windows 2k.
A walk through setting up a GPO
http://computing.vt.edu/infrastructure_services/hokies_domain/central_services/creatinggpo.html


happy trails
Chad
0
 
chadCommented:
It would be best to create an OU .. add that server to the OU and edit the policy for computer

in gpo expand the tree to here

computer configuration
  windows settings
    security settings
      local policy
         user rights assignment
           
          you will find a key on the right panel 'log on locally'
                edit it to include the admins and any other group/user you wish
0
 
s1desh0wAuthor Commented:
how do i create an OU? i have discovered how disable shut down for ALL users by adding a group policy in the MMC then navigating to local computer policy/user configuration/administrative templates/start menu and taskbar and enabling the disable and remove shutdown command. How close am i to enabling this for one particular group?

P.S. I really am winging this, i have no idea!

Thanks both...

S1desh0w
0
NEW Internet Security Report Now Available!

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out this quarters report on the threats that shook the industry in Q4 2017.

 
chadCommented:
HOW TO: Create Organizational Units in Windows Server 2003
http://support.microsoft.com/default.aspx?scid=kb;en-us;324743

not much has changed between 2k and 2k3 in regards to creating ou

1. create an OU
2. add the COMPUTERS you want resticted to the OU
3. create GPO for OU.... right click the OU and select properties... click policies tab.. use the 1st link for more on that
4. edit policy using my second post to find the KEY you need to edit

BTW, I am sure you have noticed I included the wrong key in my last post... there is one that says 'shut down system'
0
 
s1desh0wAuthor Commented:
Thanks, but i have no "active directory computers and users" in my control panel, i don't know if this is a difference between 2000 and 2003 or not. At present this is a simple workgroup network set up on 2000 pro, with a few folders shared and one pc operating as a www/ftp server. I should have made that clear earlier perhaps, sorry!

I found a way to disable shutdown via control panel/local security/local policies/user rights assignment, making "shut down the system" only available to administrators. But, once users log off (which is now their only option after selecting shutdown from the start menu) the login dialog is displayed, along with the option to shutdown! Maybe that can be disabled aswell?

Thanks

s1desh0w
0
 
chadCommented:
http://support.microsoft.com/?kbid=232399

this shows how to enable it... do the opposite :-)
0
 
chadCommented:
The AD users and computers snap-in is found on domain computers.  I assumed your network was a domain... sorry
No OUs in workgroups either.  refer to the link to add to what you have already done and you should be good.
gl
0
 
chadCommented:
The actual key is      "shutdown: allow system to be shut down without having to log on"
0
 
trywaredkCommented:
Disable the Shut Down Command
http://www.winguides.com/registry/display.php/146/

Disable Shutdown from Authentication Dialog Box (Windows NT/2000/XP)
http://www.winguides.com/registry/display.php/135/

Change the Log Off and Shutdown Settings
http://www.winguides.com/registry/display.php/1170/

Do it on one computer, and save the settings in a reg-file.
Edit the regfile, and remove anything else from the subkeys than the 3 settings above
Distribute the reg-file in logon-script

%systemroot%\system32\regedit.exe -s \\YourComputerName\YourShareName\YourRegFileName.reg

Carefull - you can harm your computers if you don't know what you are doing in registry.

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open

0
 
trywaredkCommented:
:o) Glad we could help you - thank you for the points
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Improved Protection from Phishing Attacks

WatchGuard DNSWatch reduces malware infections by detecting and blocking malicious DNS requests, improving your ability to protect employees from phishing attacks. Learn more about our newest service included in Total Security Suite today!

  • 6
  • 2
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now