Disable shutdown option for remote desktop users


We have a user that uses remote desktop to access a Windows 2003 server.  She is part of the Administrators group, but we would like to prevent her from being able to shut down the server through RDP.  In local computer policy settings under "Shut down the system," Administrators is already added.  I would like to remove this group and add only "Administrator" to the list, but the option to add or remove users are grayed out and cannot be selected.  What is the reason for this and how do I stop this user from shutting the server down?

OAC TechnologyProfessional NerdsAsked:
Who is Participating?
VJohanConnect With a Mentor Commented:
use gpo with a WMI filter. In the filter you use the server name on wich the filter have to apply.

For example:
Make a new filter with namespace: root\CIMv2
Select * from win32_computersystem where name = '<server name>'

When you use this filter on the gpo it only applies on the server, so the user can still shutdown her workstation.
You need to be looking at the domain policy and not the local policy, I am assuming this serve is on a domain? You will find it here once you run up Group Policy editor for the domain policy

User Configuration\Administrative Templates\Start Menu & Taskbar
OAC TechnologyProfessional NerdsAuthor Commented:
It needs to be a local policy on the server because if it is a domain policy she will not be able to shut down her desktop computer.  I only want to remove the shutdown option when she RDP's into the server remotely
Malli BoppeCommented:
As I said do not use local policy, if your in a domain you must use domain policy
All Courses

From novice to tech pro — start learning today.