Solved

creating a rule withing GPO for not shutting down the server when using remote desktop

Posted on 2006-11-02
2
232 Views
Last Modified: 2010-04-19
hi there, i ned to be able create a rule so that any administrator that dials in using remote desktop can only log off from their session thus removing the shut down option.  how do you do this in small business server 2003...?

thanks

phil
0
Comment
Question by:philipgecko
2 Comments
 
LVL 5

Assisted Solution

by:Keyguard
Keyguard earned 125 total points
ID: 17862570
Under the "Advanced" part of the Server Manager there is a section for "Group Policy Management", here you can see the existing GPOs for your domain - SBS installs several default ones. Its best to create a new policy object rather than edit an existing one - you'll find more information here; http://technet2.microsoft.com/WindowsServer/en/library/a3c78eb9-92fe-42f5-98ad-ae4ad1abe4c21033.mspx?mfr=true

Only problem I see is that you want to remove the Shutdown option from Administrators, you don't want to do this for the actual "Administrator" account otherwise you won't be able to shutdown the server locally either. You'd be better off creating another administrator account with the necessary rights and then applying your new GPO to that account.

Don't forget its also possible to shut the server down from the command line as well, but I assume you want to do this to prevent accidental shut downs rather than malicious action, otherwise you wouldn't give them administrator access anyway.
0
 
LVL 6

Accepted Solution

by:
manicsquirrel earned 125 total points
ID: 17864326
Building on keyguards recommendation the setting is at:

Computer Configuration -> Windows Settings ->Local Policies -> user Rights Assignments -> Shut down the system

Enable this policy and select which users or groups can shut down the server.
0

Featured Post

ScreenConnect 6.0 Free Trial

Discover new time-saving features in one game-changing release, ScreenConnect 6.0, based on partner feedback. New features include a redesigned UI, app configurations and chat acknowledgement to improve customer engagement!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …
Although Jacob Bernoulli (1654-1705) has been credited as the creator of "Binomial Distribution Table", Gottfried Leibniz (1646-1716) did his dissertation on the subject in 1666; Leibniz you may recall is the co-inventor of "Calculus" and beat Isaac…

773 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question