Solved

creating a rule withing GPO for not shutting down the server when using remote desktop

Posted on 2006-11-02
2
223 Views
Last Modified: 2010-04-19
hi there, i ned to be able create a rule so that any administrator that dials in using remote desktop can only log off from their session thus removing the shut down option.  how do you do this in small business server 2003...?

thanks

phil
0
Comment
Question by:philipgecko
2 Comments
 
LVL 5

Assisted Solution

by:Keyguard
Keyguard earned 125 total points
ID: 17862570
Under the "Advanced" part of the Server Manager there is a section for "Group Policy Management", here you can see the existing GPOs for your domain - SBS installs several default ones. Its best to create a new policy object rather than edit an existing one - you'll find more information here; http://technet2.microsoft.com/WindowsServer/en/library/a3c78eb9-92fe-42f5-98ad-ae4ad1abe4c21033.mspx?mfr=true

Only problem I see is that you want to remove the Shutdown option from Administrators, you don't want to do this for the actual "Administrator" account otherwise you won't be able to shutdown the server locally either. You'd be better off creating another administrator account with the necessary rights and then applying your new GPO to that account.

Don't forget its also possible to shut the server down from the command line as well, but I assume you want to do this to prevent accidental shut downs rather than malicious action, otherwise you wouldn't give them administrator access anyway.
0
 
LVL 6

Accepted Solution

by:
manicsquirrel earned 125 total points
ID: 17864326
Building on keyguards recommendation the setting is at:

Computer Configuration -> Windows Settings ->Local Policies -> user Rights Assignments -> Shut down the system

Enable this policy and select which users or groups can shut down the server.
0

Featured Post

Is Your Active Directory as Secure as You Think?

More than 75% of all records are compromised because of the loss or theft of a privileged credential. Experts have been exploring Active Directory infrastructure to identify key threats and establish best practices for keeping data safe. Attend this month’s webinar to learn more.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
If you are a user of the discontinued Microsoft Office Accounting 2008 (MSOA) and have to move to a new computer running Windows 8, you will be unhappy to discover that it won't install.  In particular, Microsoft SQL Server 2005 Express Edition (SSE…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

932 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now