[Webinar] Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

Remove Shutdown from Remote Desktop Connections

Posted on 2006-04-26
7
Medium Priority
?
4,604 Views
Last Modified: 2012-06-27
i read this article: http://support.microsoft.com/default.aspx?scid=kb;en-us;313924&sd=tech
and used it as a basis for removing the shutdown button from the start menu for those who connect to our server with RDP.

in the first section of the article, it said to go to gpedit.msc and go to the security options.  make sure "allow system to be shut down without having to log on" should be disabled.  this was already disabled, and yet there was a shutdown button on everyone's RDP start menu.

so the article said that the domain-wide policy may override the local policy settings.  i followed the instructions which said to go to the default domain policy (which is the only domain policy we have) and enable "disable and remove the shutdown command"

this removed the shutdown button from the start menu on RDP sessions... BUT it also removed the button from the start menu on the client computers which are joined to the domain (not using RDP).

how to i configure it so that the shutdown button is only removed for those who connect with RDP?  i do not want to take away the option from the client computers joined to the domain.

thanks
0
Comment
Question by:zephyr_hex (Megan)
  • 4
  • 3
7 Comments
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16550082
Hi zephyr_hex,

we found the easiest way was to to create term serv users in a different OU and apply the policy to them

Cheers!
0
 
LVL 44

Author Comment

by:zephyr_hex (Megan)
ID: 16577961
Jay Jay-
what is OU ?  (sorry to have my newbieness showing)
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16581642
an OU is an organisational unit in Active Directory - do you have admin access to AD?
0
Concerto's Cloud Advisory Services

Want to avoid the missteps to gaining all the benefits of the cloud? Learn more about the different assessment options from our Cloud Advisory team.

 
LVL 44

Author Comment

by:zephyr_hex (Megan)
ID: 16587222
yes, i have access to AD

i was not involved in the original setup of AD.  but i have been handling it for the past 6mos.  in that time, i have added 2 "OU's" for new braches we've opened.  the bulk of the users are in their original "folder" (which is not an OU...but i'm not sure how to identify what kind of folder it is).

so i should create more OU's...and move the users out of their folder into the OU's... and then work with group policies for each OU so that all the remote users will have the shutdown button removed.  does this sound right?  if so... i have one other question.. there is only 1 group policy (at the domain level).  one of the OU's i created a few months ago has the "default domain policy" showing under the group policy tab.  the other OU i created does not have it. how do i get the default domain policy to show under the group policy tab?

thanks
0
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 2000 total points
ID: 16591562
that is correct - you should be dividing AD up with OU's for departments etc, and then applying group policy like you said :)

the default domain policy applies to all, you may have lost the link to it, but first check, does the policy apply? - remember it is best practice to not edit that default domain policy also

policies also apply like this
LSDOU
which means   local   Site   Domain  OU     last policy applied wins, so be careful of creating conflicting policies

here is a really usefull reference for you when working with GPO
http://www.microsoft.com/downloads/details.aspx?FamilyID=7821C32F-DA15-438D-8E48-45915CD2BC14&displaylang=en
0
 
LVL 44

Author Comment

by:zephyr_hex (Megan)
ID: 16600001
thanks.
i will set things up as you've explained... and change the default domain policy back to allowing the shutdown button on the start menu... and instead edit the group policy
0
 
LVL 48

Expert Comment

by:Jay_Jay70
ID: 16600881
good work, if you get stuck give me a yell
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

The HP utility "HP Lights-Out Online Configuration Utility for Windows Server 2003/2008" could be of great use when it comes to remotely configure a HP servers ILO WITHOUT rebooting the server. We would only need to create and run scripts using thi…
Learn about cloud computing and its benefits for small business owners.
This video shows how to quickly and easily deploy an email signature for all users in Office 365 and prevent it from being added to replies and forwards. (the resulting signature is applied on the server level in Exchange Online) The email signat…
Whether it be Exchange Server Crash Issues, Dirty Shutdown Errors or Failed to mount error, Stellar Phoenix Mailbox Exchange Recovery has always got your back. With the help of its easy to understand user interface and 3 simple steps recovery proced…

865 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question