i read this article: http://support.microsoft.com/default.aspx?scid=kb;en-us;313924&sd=tech
and used it as a basis for removing the shutdown button from the start menu for those who connect to our server with RDP.
in the first section of the article, it said to go to gpedit.msc and go to the security options. make sure "allow system to be shut down without having to log on" should be disabled. this was already disabled, and yet there was a shutdown button on everyone's RDP start menu.
so the article said that the domain-wide policy may override the local policy settings. i followed the instructions which said to go to the default domain policy (which is the only domain policy we have) and enable "disable and remove the shutdown command"
this removed the shutdown button from the start menu on RDP sessions... BUT it also removed the button from the start menu on the client computers which are joined to the domain (not using RDP).
how to i configure it so that the shutdown button is only removed for those who connect with RDP? i do not want to take away the option from the client computers joined to the domain.