Solved

creating a rule withing GPO for not shutting down the server when using remote desktop

Posted on 2006-11-02
2
210 Views
Last Modified: 2010-04-19
hi there, i ned to be able create a rule so that any administrator that dials in using remote desktop can only log off from their session thus removing the shut down option.  how do you do this in small business server 2003...?

thanks

phil
0
Comment
Question by:philipgecko
2 Comments
 
LVL 5

Assisted Solution

by:Keyguard
Keyguard earned 125 total points
ID: 17862570
Under the "Advanced" part of the Server Manager there is a section for "Group Policy Management", here you can see the existing GPOs for your domain - SBS installs several default ones. Its best to create a new policy object rather than edit an existing one - you'll find more information here; http://technet2.microsoft.com/WindowsServer/en/library/a3c78eb9-92fe-42f5-98ad-ae4ad1abe4c21033.mspx?mfr=true

Only problem I see is that you want to remove the Shutdown option from Administrators, you don't want to do this for the actual "Administrator" account otherwise you won't be able to shutdown the server locally either. You'd be better off creating another administrator account with the necessary rights and then applying your new GPO to that account.

Don't forget its also possible to shut the server down from the command line as well, but I assume you want to do this to prevent accidental shut downs rather than malicious action, otherwise you wouldn't give them administrator access anyway.
0
 
LVL 6

Accepted Solution

by:
manicsquirrel earned 125 total points
ID: 17864326
Building on keyguards recommendation the setting is at:

Computer Configuration -> Windows Settings ->Local Policies -> user Rights Assignments -> Shut down the system

Enable this policy and select which users or groups can shut down the server.
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

This guide is intended to provide step by step instructions on how to migrate from Small Business Server 2003 to Small Business Server 2011. NOTE: This guide has been written using the preview version of SBS2011 therefore some of the screens may …
I’m often asked about newer and larger USB drives connected to SBS2008 and 2011 failing Windows Server Backup vs the older USB drives not failing. As disk space continues to grow and drive technology change SBS2008 and some SBS2011 end up with the f…
This video discusses moving either the default database or any database to a new volume.
In this seventh video of the Xpdf series, we discuss and demonstrate the PDFfonts utility, which lists all the fonts used in a PDF file. It does this via a command line interface, making it suitable for use in programs, scripts, batch files — any pl…

708 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now