Avatar of creceveur
creceveurFlag for United States of America asked on

Remove Shutdown option for specific users and terminal services

I have 2008 Standard server with AD setup.  I want to allow any workstation user to shutdown their own workstation.  I also want to allow a server operator to shutdown the server.  I also have TS setup on the server, and want to allow ONLY server operators to shutdown the server via remote, regular users remoting in must not be able to.  I've played around with different configurations of GP's but can't get it setup exactly that way.
Windows Server 2008Windows Server 2003Active Directory

Avatar of undefined
Last Comment

8/22/2022 - Mon

Have you configured the GPO in Computer Configuration, Windows Settings, Security Settings, Local Policies, User Rights Assignment, Shut down the computer?

Yes, but don't those changes apply to workstations on the domain as well?  I want to allow domain user x to shutdown their workstation, but if domain user x remotes into server, shutdown of the server is not allowed.  Only admin's can shutdown server locally and remotely.

You'll need to move the server into its own Organization Unit in Active Directory, then create a new Group Policy Object which is only linked to the OU containing the Server. You can then set the policy on that GPO, which means it won't apply to workstations (since they're in a different OU).
Your help has saved me hundreds of hours of internet surfing.

And then use filtering on the server GPO to only restrict shutdown for the domain users?

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
See how we're fighting big data
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question