• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4614
  • Last Modified:

Remove Shutdown from Remote Desktop Connections

i read this article: http://support.microsoft.com/default.aspx?scid=kb;en-us;313924&sd=tech
and used it as a basis for removing the shutdown button from the start menu for those who connect to our server with RDP.

in the first section of the article, it said to go to gpedit.msc and go to the security options.  make sure "allow system to be shut down without having to log on" should be disabled.  this was already disabled, and yet there was a shutdown button on everyone's RDP start menu.

so the article said that the domain-wide policy may override the local policy settings.  i followed the instructions which said to go to the default domain policy (which is the only domain policy we have) and enable "disable and remove the shutdown command"

this removed the shutdown button from the start menu on RDP sessions... BUT it also removed the button from the start menu on the client computers which are joined to the domain (not using RDP).

how to i configure it so that the shutdown button is only removed for those who connect with RDP?  i do not want to take away the option from the client computers joined to the domain.

thanks
0
zephyr_hex (Megan)
Asked:
zephyr_hex (Megan)
  • 4
  • 3
1 Solution
 
Jay_Jay70Commented:
Hi zephyr_hex,

we found the easiest way was to to create term serv users in a different OU and apply the policy to them

Cheers!
0
 
zephyr_hex (Megan)DeveloperAuthor Commented:
Jay Jay-
what is OU ?  (sorry to have my newbieness showing)
0
 
Jay_Jay70Commented:
an OU is an organisational unit in Active Directory - do you have admin access to AD?
0
Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

 
zephyr_hex (Megan)DeveloperAuthor Commented:
yes, i have access to AD

i was not involved in the original setup of AD.  but i have been handling it for the past 6mos.  in that time, i have added 2 "OU's" for new braches we've opened.  the bulk of the users are in their original "folder" (which is not an OU...but i'm not sure how to identify what kind of folder it is).

so i should create more OU's...and move the users out of their folder into the OU's... and then work with group policies for each OU so that all the remote users will have the shutdown button removed.  does this sound right?  if so... i have one other question.. there is only 1 group policy (at the domain level).  one of the OU's i created a few months ago has the "default domain policy" showing under the group policy tab.  the other OU i created does not have it. how do i get the default domain policy to show under the group policy tab?

thanks
0
 
Jay_Jay70Commented:
that is correct - you should be dividing AD up with OU's for departments etc, and then applying group policy like you said :)

the default domain policy applies to all, you may have lost the link to it, but first check, does the policy apply? - remember it is best practice to not edit that default domain policy also

policies also apply like this
LSDOU
which means   local   Site   Domain  OU     last policy applied wins, so be careful of creating conflicting policies

here is a really usefull reference for you when working with GPO
http://www.microsoft.com/downloads/details.aspx?FamilyID=7821C32F-DA15-438D-8E48-45915CD2BC14&displaylang=en
0
 
zephyr_hex (Megan)DeveloperAuthor Commented:
thanks.
i will set things up as you've explained... and change the default domain policy back to allowing the shutdown button on the start menu... and instead edit the group policy
0
 
Jay_Jay70Commented:
good work, if you get stuck give me a yell
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Free Tool: Subnet Calculator

The subnet calculator helps you design networks by taking an IP address and network mask and returning information such as network, broadcast address, and host range.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

  • 4
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now