Remove Shutdown from Remote Desktop Connections
i read this article: http://support.microsoft.com/default.aspx?scid=kb;en-us;313924&sd=tech
and used it as a basis for removing the shutdown button from the start menu for those who connect to our server with RDP.
in the first section of the article, it said to go to gpedit.msc and go to the security options. make sure "allow system to be shut down without having to log on" should be disabled. this was already disabled, and yet there was a shutdown button on everyone's RDP start menu.
so the article said that the domain-wide policy may override the local policy settings. i followed the instructions which said to go to the default domain policy (which is the only domain policy we have) and enable "disable and remove the shutdown command"
this removed the shutdown button from the start menu on RDP sessions... BUT it also removed the button from the start menu on the client computers which are joined to the domain (not using RDP).
how to i configure it so that the shutdown button is only removed for those who connect with RDP? i do not want to take away the option from the client computers joined to the domain.
thanks
and used it as a basis for removing the shutdown button from the start menu for those who connect to our server with RDP.
in the first section of the article, it said to go to gpedit.msc and go to the security options. make sure "allow system to be shut down without having to log on" should be disabled. this was already disabled, and yet there was a shutdown button on everyone's RDP start menu.
so the article said that the domain-wide policy may override the local policy settings. i followed the instructions which said to go to the default domain policy (which is the only domain policy we have) and enable "disable and remove the shutdown command"
this removed the shutdown button from the start menu on RDP sessions... BUT it also removed the button from the start menu on the client computers which are joined to the domain (not using RDP).
how to i configure it so that the shutdown button is only removed for those who connect with RDP? i do not want to take away the option from the client computers joined to the domain.
thanks
ASKER
Jay Jay-
what is OU ? (sorry to have my newbieness showing)
what is OU ? (sorry to have my newbieness showing)
an OU is an organisational unit in Active Directory - do you have admin access to AD?
ASKER
yes, i have access to AD
i was not involved in the original setup of AD. but i have been handling it for the past 6mos. in that time, i have added 2 "OU's" for new braches we've opened. the bulk of the users are in their original "folder" (which is not an OU...but i'm not sure how to identify what kind of folder it is).
so i should create more OU's...and move the users out of their folder into the OU's... and then work with group policies for each OU so that all the remote users will have the shutdown button removed. does this sound right? if so... i have one other question.. there is only 1 group policy (at the domain level). one of the OU's i created a few months ago has the "default domain policy" showing under the group policy tab. the other OU i created does not have it. how do i get the default domain policy to show under the group policy tab?
thanks
i was not involved in the original setup of AD. but i have been handling it for the past 6mos. in that time, i have added 2 "OU's" for new braches we've opened. the bulk of the users are in their original "folder" (which is not an OU...but i'm not sure how to identify what kind of folder it is).
so i should create more OU's...and move the users out of their folder into the OU's... and then work with group policies for each OU so that all the remote users will have the shutdown button removed. does this sound right? if so... i have one other question.. there is only 1 group policy (at the domain level). one of the OU's i created a few months ago has the "default domain policy" showing under the group policy tab. the other OU i created does not have it. how do i get the default domain policy to show under the group policy tab?
thanks
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
thanks.
i will set things up as you've explained... and change the default domain policy back to allowing the shutdown button on the start menu... and instead edit the group policy
i will set things up as you've explained... and change the default domain policy back to allowing the shutdown button on the start menu... and instead edit the group policy
good work, if you get stuck give me a yell
we found the easiest way was to to create term serv users in a different OU and apply the policy to them
Cheers!